CVE-2021-22792

A CWE-476: NULL Pointer Dereference vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU part numbers BMEP and BMEH, all versions, Modicon M340 CPU par...

CVE-2021-22791

A CWE-787: Out-of-bounds Write vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU part numbers BMEP and BMEH, all versions, Modicon M340 CPU part...

Out-of-bounds

A CWE-125: Out-of-bounds Read vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU part numbers BMEP and BMEH, all versions, Modicon M340 CPU part...

CVE-2021-22790

A CWE-125: Out-of-bounds Read vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU part numbers BMEP and BMEH, all versions, Modicon M340 CPU part...

Out-of-bounds

A CWE-787: Out-of-bounds Write vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU part numbers BMEP and BMEH, all versions, Modicon M340 CPU part...

Design/Logic Flaw

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU part numbers BM...

CVE-2021-22792

A CWE-476: NULL Pointer Dereference vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU part numbers BMEP and BMEH, all versions, Modicon M340 CPU par...

CVE-2021-22792

A CWE-476: NULL Pointer Dereference vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU part numbers BMEP and BMEH, all versions, Modicon M340 CPU par...

CVE-2021-22791

A CWE-787: Out-of-bounds Write vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU part numbers BMEP and BMEH, all versions, Modicon M340 CPU part...

CVE-2021-22791

CVE-2021-22791 is a CWE-787 Out-of-bounds Write affecting Schneider Electric Modicon PLC line and related simulators. The root cause is upgrade-file validation failure in the controller application, which can lead to a Denial of Service when updating with a specially crafted project file. Affecte...

CVE-2021-22790

CVE-2021-22790 is an out-of-bounds read (CWE-125) vulnerability affecting Schneider Electric Modicon/M580/M340/MC80/Momentum Ethernet/Quantum/Premium CPUs and PLC simulators, triggered by a specially crafted project file. Root cause: out-of-bounds read could cause Denial of Service on Modicon PLC...

CVE-2021-22790

A CWE-125: Out-of-bounds Read vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU part numbers BMEP and BMEH, all versions, Modicon M340 CPU part...

CVE-2021-22789

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU part numbers BM...

The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers such as Modicon M340, Modicon Quantum, and Modicon Premium lies in the insufficient checking of unusual or exceptional states. This allows a intruder to trigger a malfunction in maintenance by using a specially crafted HTTP packet.

The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers such as Modicon M340, Modicon Quantum, and Modicon Premium lies in the insufficient testing of unusual or exceptional states. Exploiting this vulnerability can allow an attacker operating remotely...

The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers such as Modicon M340, Modicon Quantum, and Modicon Premium lies in the ability to disclose information, allowing unauthorized access to protected data.

The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers such as Modicon M340, Modicon Quantum, and Modicon Premium is related to the disclosure of information. Exploiting this vulnerability can allow unauthorized individuals to gain unauthorized access...

多款 Schneider Electric 产品缓冲区错误漏洞

Schneider Electric Modicon M580 and others are products of Schneider Electric, France.Schneider Electric Modicon M580 is a programmable automation controller.Schneider Electric Modicon A buffer error vulnerability exists in multiple Schneider Electric products and originates from the controller...

The vulnerability of the microprogrammed logic controller Quantum 140 NOE771x1, related to insufficient checking of unusual or exceptional states, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed logic controller Quantum 140 NOE771x1 software is related to insufficient testing of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to cause malfunctions in the system...

The vulnerability of the MagickCore/quantum-private.h component of the console-based image editing tool ImageMagick, which involves integer overflows, allows attackers to cause service interruptions.

The vulnerability of the MagickCore/quantum-private.h component in the console-based image editing tool ImageMagick is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the ScaleAnyToQuantum() function in the /MagickCore/quantum-private.h component of the console-based ImageMagick graphics editor allows a hacker to trigger a service failure.

The vulnerability of the ScaleAnyToQuantum function in the /MagickCore/quantum-private.h file of the ImageMagick console graphics editor involves integer overflow. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

The vulnerability of the MagickCore/quantum.h component of the console-based image editing tool ImageMagick, related to integer overflow of values, allows a hacker to cause a service failure.

The vulnerability of the MagickCore/quantum.h component in the console-based image editing tool ImageMagick is related to integer overflow. Exploiting this vulnerability allows a remote attacker to cause a service failure through a specially created file...