Memory corruption

All versions of VAMPSET software produced by Schneider Electric, prior to V2.2.189, are susceptible to a memory corruption vulnerability when a corrupted vf2 file is used. This vulnerability causes the software to halt or not start when trying to open the corrupted file. This vulnerability occurs...

CVE-2017-7967

All versions of VAMPSET software produced by Schneider Electric, prior to V2.2.189, are susceptible to a memory corruption vulnerability when a corrupted vf2 file is used. This vulnerability causes the software to halt or not start when trying to open the corrupted file. This vulnerability occurs...

CVE-2017-7967

All versions of VAMPSET software produced by Schneider Electric, prior to V2.2.189, are susceptible to a memory corruption vulnerability when a corrupted vf2 file is used. This vulnerability causes the software to halt or not start when trying to open the corrupted file. This vulnerability occurs...

CVE-2017-7967

Summary (CVE-2017-7967) : Schneider Electric VAMPSET software prior to version 2.2.189 is vulnerable to memory corruption when a corrupted vf2 file is loaded. The issue occurs with malformed fill settings and is triggered in standalone mode, without a protection-relay connection. Exploitation is ...

Weak Password Vulnerability in Multiple GE Products

GE 750 Feeder Protection Relay and others are relay products of General Electric GE. A security vulnerability exists in several GE products due to the program using weak passwords. An attacker could exploit the vulnerability to gain access to the system...

Schneider Electric Wonderware Historian Client

CVSS v3 6.6 ATTENTION: Low skill level to exploit. Vendor: Schneider Electric Equipment: Wonderware Historian Client Vulnerability: Improper XML Parser Configuration AFFECTED PRODUCTS The following versions of Wonderware Historian Client, an analysis and reporting software, are affected: Wonderwa...

CVE-2017-8371

Schneider Electric StruxureWare Data Center Expert before 7.4.0 uses cleartext RAM storage for passwords, which might allow remote attackers to obtain sensitive information via unspecified vectors...

Information disclosure

Schneider Electric StruxureWare Data Center Expert before 7.4.0 uses cleartext RAM storage for passwords, which might allow remote attackers to obtain sensitive information via unspecified vectors...

CVE-2017-8371

Schneider Electric StruxureWare Data Center Expert before 7.4.0 uses cleartext RAM storage for passwords, which might allow remote attackers to obtain sensitive information via unspecified vectors...

CVE-2017-8371

CVE-2017-8371 affects Schneider Electric StruxureWare Data Center Expert prior to 7.4.0. The root cause is cleartext RAM storage of passwords, enabling potential remote disclosure of credentials via unspecified vectors. Public reports in multiple sources corroborate information disclosure in Stru...

PT-2018-18: Buffer Overflow in Schneider Electric's Modicon Premium, Modicon Quantum, and Modicon M340

The specialists of the Positive Research center have detected a Buffer Overflow vulnerability in Schneider Electric's Modicon Premium, Modicon Quantum, and Modicon M340. A buffer overflow vulnerability, due to the length of the source string specified as the number of bytes to be copied instead o...

PT-2018-17: Information Disclosure in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200. Hash collisions in algorithms used for password encryption allow attackers to obtain passwords. How to fix...

PT-2018-15: Arbitrary Code Execution in Schneider Electric's Modicon Quantum

The specialists of the Positive Research center have detected an Arbitrary Code Execution vulnerability in Schneider Electric's Modicon Quantum. A vulnerability allows attackers to execute arbitrary code, cause a denial of service, or load a malicious firmware via an FTP command used to upgrade t...

PT-2017-3707 · Schneider Electric · Modicon M340 +3

Name of the Vulnerable Software and Affected Versions: Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers affected versions not specified Description: The issue concerns a vulnerable hash algorithm used for password encryption in the communication...

PT-2018-20: Arbitrary Code Execution in Schneider Electric's BMXNOR0200

The specialists of the Positive Research center have detected an Arbitrary Code Execution vulnerability in Schneider Electric's BMXNOR0200. A vulnerability in the HTTP request parser allows remote attackers to execute arbitrary code. How to fix Use the vendor's advisory:...

PT-2018-19: Authorization Bypass in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200

The specialists of the Positive Research center have detected an Authorization Bypass vulnerability in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200. Vulnerability allows attackers to bypass authorization using requests to CGI functions. How to fix Use the...

PT-2018-16: Hardcoded Accounts in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200

The specialists of the Positive Research center have detected a Hardcoded accounts vulnerability in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200. Hardcoded accounts allow attackers to gain access to the FTP server. How to fix Use the vendor's advisory:...

PT-2018-21: Buffer Overflow in Schneider Electric's Modicon Premium, Modicon Quantum, and Modicon M340

The specialists of the Positive Research center have detected a Buffer Overflow vulnerability in Schneider Electric's Modicon Premium, Modicon Quantum, and Modicon M340. A vulnerability in the web services to process SOAP requests allows attackers to trigger a buffer overflow. How to fix Use the...

Code injection

An Inadequate Encryption Strength issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. The software will connect via Transport Layer Security without verifying the peer's SSL certificate properly...

Cross site request forgery (csrf)

A Cross-Site Request Forgery issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. The client request may be forged from a different site. This will allow an external site to access internal RDP systems on behalf of the currently logged in user...