CVE-2018-7850

A CWE-807: Reliance on Untrusted Inputs in a Security Decision vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause invalid information displayed in Unity Pro software...

Design/Logic Flaw

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when reading memory blocks with an invalid data size or with an invalid data offset in the controller over Modbus...

CVE-2018-7844

CVE-2018-7844 affects Schneider Electric Modicon M580, M340, Quantum and Premium PLCs. The UMAS read memory block function can disclose plaintext data, including SNMP community strings, when reading memory blocks over Modbus. Exploitation is unauthenticated and feasible against firmware versions ...

Rockwell Automation/Allen-Bradley MicroLogix 1400 Series A <= 7 and Series B <= 15.000 DNP3 Remote DoS

Binary data 64.prm...

Siemens SIMATIC S7-1200 PLCs < 4.0 Random Number Generator Insufficient Entropy

Binary data 720193.prm...

Siemens SIMATIC S7-1500 < 1.5 and S7-1200 PLCs < 4.0 Cross Site Request Forgery

Binary data 720192.prm...

Schneider Electric Modicon M241 and M251 PLCs Insufficiently Random Values

Binary data 720114.prm...

Siemens SIMATIC S7-1500 PLCs < 1.5 Web Server Open Redirect

Binary data 720191.prm...

Schneider Electric Modicon M241 and M251 PLCs Insufficiently Protected Credentials

Binary data 720115.prm...

Siemens SIMATIC S7-1200 PLCs 2.x and 3.x ISO-TSAP Port DOS

Binary data 720187.prm...

Schneider Electric Multiple PLCs Improper Authentication

Binary data 720033.prm...

Siemens SIMATIC S7-1500 PLCs < 1.5 Random Number Generator Insufficient Entropy

Binary data 720194.prm...

Siemens SIMATIC S7-1500 PLCs < 1.5 HTTPS Packets DOS

Binary data 720202.prm...

Schneider Electric Modicon PLCs Predictable Value Range

Binary data 720116.prm...

Schneider Electric Modicon M340 PLCs Buffer Overflow

Binary data 720075.prm...

Siemens SIMATIC S7-1200 PLCs 2.x <= 3.0.1 XSS

Binary data 720022.prm...

Code injection

ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. Researchers have found some controllers are susceptible to a denial-of-service attack due to a flood of network packets...

CVE-2019-10953

ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. Researchers have found some controllers are susceptible to a denial-of-service attack due to a flood of network packets...

Unitronics PCOM remote START/STOP/RESET command

Unitronics Vision PLCs allow remote administrative functions to control the PLC using authenticated PCOM commands. This module supports START, STOP and RESET operations. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework...

Mitsubishi Electric MELSEC-Q Series PLCs

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Mitsubishi Electric Equipment: MELSEC-Q series PLCs Vulnerability: Resource Exhaustion 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a remote attacker to send...