CVE-2019-6807: Improper Handling of Exceptional Conditions

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible denial of service when writing sensitive application variables to the controller over Modbus...

CVE-2019-6806: Undefined Security Weakness

A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of SNMP information when reading variables in the controller using Modbus...

CVE-2019-6819: Improper Check for Unusual or Exceptional Conditions

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists which could cause a possible Denial of Service when specific Modbus frames are sent to the controller in the products: Modicon M340 - firmware versions prior to V3.01, Modicon M580 - firmware versions prior to...

CVE-2019-6821: Use of Insufficiently Random Values

CWE-330: Use of Insufficiently Random Values vulnerability, which could cause the hijacking of the TCP connection when using Ethernet communication in Modicon M580 firmware versions prior to V2.30, and all firmware versions of Modicon M340, Modicon Premium, Modicon Quantum...

CVE-2018-7847: Improper Authentication

A CWE-284: Improper Access Control vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service or potential code execution by overwriting configuration settings of the controller over Modbus...

Denial of Service Vulnerability in Multiple Schneider Electric Products (CNVD-2019-15891)

The Schneider Electric Modicon M580 is a programmable automation controller.The Schneider Electric Modicon Premium is a large programmable logic controller PLC for discrete or process applications.The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process...

Schneider Electric Modicon Controllers

1. EXECUTIVE SUMMARY CVSS v3 5.4 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Schneider Electric Equipment: Modicon M580, Modicon M340, Modicon Premium, and Modicon Quantum Vulnerability: Use of Insufficiently Random Values 2. RISK EVALUATION Successful exploitation of this...

PT-2019-2276

Name of the Vulnerable Software and Affected Versions Modicon M580 affected versions not specified Modicon M340 affected versions not specified Modicon Quantum affected versions not specified Modicon Premium affected versions not specified Description A vulnerability exists that could cause the...

PT-2019-2332

Name of the Vulnerable Software and Affected Versions Modicon M580 affected versions not specified Modicon M340 affected versions not specified Modicon Quantum affected versions not specified Modicon Premium affected versions not specified Description A vulnerability exists that could cause the...

PT-2019-2284

Name of the Vulnerable Software and Affected Versions Modicon M340 versions prior to V3.01 Modicon M580 versions prior to V2.80 Modicon Quantum all firmware versions Modicon Premium all firmware versions Description A vulnerability exists due to improper check for unusual or exceptional condition...

PT-2019-2342 · Schneider Electric · Modicon M580 +4

Name of the Vulnerable Software and Affected Versions: Modicon M580 versions prior to V2.50 Modicon M340 versions prior to V3.01 BMxCRA312xx versions prior to V2.40 Modicon Premium all firmware versions 140CRA312xxx all firmware versions Description: The issue is related to buffer errors in the...

PT-2019-2334

Name of the Vulnerable Software and Affected Versions Modicon M580 affected versions not specified Modicon M340 affected versions not specified Modicon Quantum affected versions not specified Modicon Premium affected versions not specified Description A vulnerability exists that could cause a...

PT-2019-2274

Name of the Vulnerable Software and Affected Versions Modicon M580 versions affected versions not specified Modicon M340 versions affected versions not specified Modicon Quantum versions affected versions not specified Modicon Premium versions affected versions not specified Description The issue...

PT-2019-2280

Name of the Vulnerable Software and Affected Versions Modicon M580 affected versions not specified Modicon M340 affected versions not specified Modicon Quantum affected versions not specified Modicon Premium affected versions not specified Description A vulnerability exists in the software of the...

PT-2019-2278

Name of the Vulnerable Software and Affected Versions Modicon M580 affected versions not specified Modicon M340 affected versions not specified Modicon Quantum affected versions not specified Modicon Premium affected versions not specified Description A reliance on untrusted inputs in a security...

PT-2019-2275

Name of the Vulnerable Software and Affected Versions Modicon M580 versions affected versions not specified Modicon M340 versions affected versions not specified Modicon Quantum versions affected versions not specified Modicon Premium versions affected versions not specified Description The issue...

PT-2019-2277

Name of the Vulnerable Software and Affected Versions Modicon M580 versions affected versions not specified Modicon M340 versions affected versions not specified Modicon Quantum versions affected versions not specified Modicon Premium versions affected versions not specified Description The issue...

PT-2019-2283

Name of the Vulnerable Software and Affected Versions Modicon M580 versions prior to V2.30 Modicon M340 affected versions not specified Modicon Premium affected versions not specified Modicon Quantum affected versions not specified Description The issue is related to the use of insufficiently...

PT-2019-2281

Name of the Vulnerable Software and Affected Versions Modicon M580 versions prior to a fixed version Modicon M340 versions prior to a fixed version Modicon Quantum versions prior to a fixed version Modicon Premium versions prior to a fixed version Description The issue is related to an uncaught...

PT-2019-2272

Name of the Vulnerable Software and Affected Versions Modicon M580 affected versions not specified Modicon M340 affected versions not specified Modicon Quantum affected versions not specified Modicon Premium affected versions not specified Description A vulnerability exists in the Modicon...