ICSSecurityScripts

ICSSecurityScripts Industrial Security Scripts Beckhoff-CX9020-WebControl.py: Controlling the Beckhoff CX9020 Windows CE PLC FullBeckhoffScan.py: Elaborate script for scanning AND hacking Beckhoff PLCs PhoenixControlPLC-ILC150.py: Print out CPU status and reverts it, tested and working on ILC150 ...

Schneider Electric U.motion Builder - Remote Code Execution

U.motion Builder 1.3.4 contains a remote code execution vulnerability caused by improper input sanitization, allowing attackers to execute arbitrary system commands through crafted input parameters. id: CVE-2018-7841 info: name: Schneider Electric U.motion Builder - Remote Code Execution author:...

Schneider Electric U.motion Builder - SQL Injection

The vulnerability exists within processing of trackimportexport.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the objectid input parameter. id: CVE-2018-7765 info: name: Schneider Electric U.motion...

CVE-2018-7854

CVE-2018-7854 Affected Products Schneider Electric Modicon M580 Version 2.90 Schneider Electric Modicon M340 Version 3.10 References https://www.se.com/ww/en/download/document/SEVD-2019-134-11/ https://www.talosintelligence.com/vulnerabilityreports/TALOS-2019-0765 Usage python CVE-2018-7854.py...

CVE-2018-7845

CVE-2018-7845 Affected Products Schneider Electric Modicon M580 Version 2.80 Schneider Electric Modicon M340 Version 3.01 Schneider Electric Modicon Premium Version 3.20 Schneider Electric Modicon Quantum Version 3.60 References https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2018-7849

CVE-2018-7849 Affected Products Schneider Electric Modicon M580 Version 2.90 Schneider Electric Modicon M340 Version 3.10 Schneider Electric Modicon Premium All Versions Schneider Electric Modicon Quantum All Versions References https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2018-7852

CVE-2018-7852 Affected Products Schneider Electric Modicon M580 Version 2.80 Schneider Electric Modicon M340 Version 3.01 Schneider Electric Modicon Premium Version 3.20 Schneider Electric Modicon Quantum Version 3.60 References https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2018-7842

CVE-2018-7842 Affected Products Schneider Electric Modicon M580 Version 2.90 Schneider Electric Modicon M340 Version 3.10 Schneider Electric Modicon Premium All Versions Schneider Electric Modicon Quantum All Versions References https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2018-7844

CVE-2018-7844 Affected Products Schneider Electric Modicon M580 All Versions Schneider Electric Modicon M340 All Versions Schneider Electric Modicon Premium All Versions Schneider Electric Modicon Quantum All Versions References https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2018-7848

CVE-2018-7848 Affected Products Schneider Electric Modicon M580 Version 2.90 Schneider Electric Modicon M340 Version 3.10 Schneider Electric Modicon Premium All Versions Schneider Electric Modicon Quantum All Versions References https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

apxutil

A tool to manipulate Schneider Electric PLC archive files This tool can extract and reassemble PLC "archive" files, used by several Schneider Electric PLC:s, including at least M580, M340 and Quantum. The archive files with an extension of .sta are really a zip archive containing a few files...

CVE-2018-7846

CVE-2018-7846 Affected Products Schneider Electric Modicon M580 Version 2.90 Schneider Electric Modicon M340 Version 3.10 Schneider Electric Modicon Premium All Versions Schneider Electric Modicon Quantum All Versions References https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2018-7843

CVE-2018-7843 Affected Products Schneider Electric Modicon M580 Version 2.80 Schneider Electric Modicon M340 Version 3.10 Schneider Electric Modicon Premium Version 3.20 Schneider Electric Modicon Quantum Version 3.60 References https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

EVlink City < R8 V3.4.0.1 - Authentication Bypass

A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1, EVlink Parking EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1, and EVlink Smart Wallbox EVB1A all versions prior to R8 V3.4.0.1 that could allow an attacker t...

SpaceLogic C-Bus Home Controller <=1.31.460 - Remote Command Execution

SpaceLogic C-Bus Home Controller through 1.31.460 is susceptible to remote command execution via improper neutralization of special elements. Remote root exploit can be enabled when the command is compromised, and an attacker can potentially execute malware, obtain sensitive information, modify...

isf

Industrial Exploitation Framework ISFIndustrial Exploitation Framework is a exploitation framework based on Python, it's similar to metasploit framework. ISF is based on open source project routersploit. Read this in other languages:English, 简体中文, Disclaimer Usage of ISF for attacking targets...

Schneider Electric SCADAPack x70 Products Insufficiently Protected Credentials (CVE-2026-81861)

CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authentication information and unauthorized access to RTU functionality. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVE...

PT-2026-89045

News: Schneider Electric, Siemens, and Aveva ship ICS Patch Tuesday. Worst new hit: Modicon M580 auth CVE-2026-3869 CVSS 9.2. Siemens flags critical Reyrolle 7SR5, OIS, Industrial Edge bugs. OT owners: patch controllers now. https://t.co/TT7I5NW8Ee...

CVE-2026-77120

creationtimestamp| type| source ---|---|--- 2026-09-08 16:45:07+00:00| seen| https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-schneider-electric-15 2026-09-09 17:28:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/apgqf2kdfuep5...

CVE-2026-3869

creationtimestamp| type| source ---|---|--- 2026-09-08 16:45:02+00:00| seen| https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-schneider-electric-15 2026-09-09 13:45:25+00:00| seen| https://bsky.app/profile/hendryadrian.bsky.social/post/3mv3oc4sdrp2x 2026-09-11 17:20:09+00:00| seen|...