8857 matches found
CVE-2013-2761
The Schneider Electric M340 BMXNOE01xx and BMXP3420xx PLC modules allow remote authenticated users to cause a denial of service module crash via crafted FTP traffic, as demonstrated by the FileZilla FTP client...
CVE-2013-0663
Cross-site request forgery CSRF vulnerability on the Schneider Electric Quantum 140NOE77111, 140NOE77101, and 140NWM10000; M340 BMXNOC0401, BMXNOE0100x, and BMXNOE011xx; and Premium TSXETY4103, TSXETY5103, and TSXWMY100 PLC modules allows remote attackers to hijack the authentication of arbitrary...
CVE-2013-2761
Summary: CVE-2013-2761 affects Schneider Electric M340 BMXNOE01xx and BMXP3420xx PLC modules. Vulnerability: Remote authenticated users can trigger a denial of service (module crash) by sending crafted FTP traffic (as demonstrated with FileZilla). Impact: Partial availability loss of the affected...
CVE-2013-2762
The Schneider Electric Magelis XBT HMI controller has a default password for authentication of configuration uploads, which makes it easier for remote attackers to bypass intended access restrictions via crafted configuration data...
CVE-2013-2763
The Schneider Electric M340 PLC modules allow remote attackers to cause a denial of service resource consumption via unspecified vectors. NOTE: the vendor reportedly disputes this issue because it "could not be duplicated" and "an attacker could not remotely exploit this observed behavior to deny...
CVE-2013-2762
The CVE-2013-2762 issue affects the Schneider Electric Magelis XBT HMI controller and is caused by a default password used for authentication of configuration uploads. This allows remote attackers to bypass access restrictions via crafted configuration data. Exploitation details or existence of i...
CVE-2013-0663
CVE-2013-0663 affects Schneider Electric Modicon M340, Quantum 140NOE7711x/140NWM10000, and Premium TSXETY4103/5103/TSXWMY100 PLC modules. The vulnerability is a Cross-Site Request Forgery (CSRF) in the web server interface that permits remote attackers to hijack user authentication and issue com...
PT-2013-1300
Name of the Vulnerable Software and Affected Versions Schneider Electric Quantum versions 140NOE77111, 140NOE77101, and 140NWM10000 Schneider Electric M340 versions BMXNOC0401, BMXNOE0100x, and BMXNOE011xx Schneider Electric Premium versions TSXETY4103, TSXETY5103, and TSXWMY100 Description A...
Schneider Electric Interactive Graphical SCADA System Buffer Overflow (CVE-2013-0657)
A buffer overflow vulnerability exists in Schneider Electric's Interactive Graphical SCADA System IGSS application. The vulnerability is due to an integer underflow that leads to a stack buffer overflow when processing crafted input sent to ports 12397/TCP and 12399/TCP...
CVE-2013-2763: Uncontrolled Resource Consumption
The Schneider Electric M340 PLC modules allow remote attackers to cause a denial of service resource consumption via unspecified vectors. NOTE: the vendor reportedly disputes this issue because it "could not be duplicated" and "an attacker could not remotely exploit this observed behavior to deny...
PT-2013-3915
Name of the Vulnerable Software and Affected Versions Schneider Electric Magelis XBT HMI controller affected versions not specified Description The issue concerns a default password used for authentication of configuration uploads, making it easier for remote attackers to bypass intended access...
PT-2013-1299
Name of the Vulnerable Software and Affected Versions Schneider Electric M340 BMXNOE01xx and BMXP3420xx PLC modules affected versions not specified Description The issue is caused by a buffer overflow in the software of the Schneider Electric Modicon M340 programmable logic controller. This allow...
CVE-2013-0663: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability on the Schneider Electric Quantum 140NOE77111, 140NOE77101, and 140NWM10000; M340 BMXNOC0401, BMXNOE0100x, and BMXNOE011xx; and Premium TSXETY4103, TSXETY5103, and TSXWMY100 PLC modules allows remote attackers to hijack the authentication of arbitrary...
CVE-2013-2762: Cross-Site Request Forgery (CSRF)
The Schneider Electric Magelis XBT HMI controller has a default password for authentication of configuration uploads, which makes it easier for remote attackers to bypass intended access restrictions via crafted configuration data...
CVE-2013-0664: Undefined Security Weakness
The FactoryCast service on the Schneider Electric Quantum 140NOE77111 and 140NWM10000, M340 BMXNOE0110x, and Premium TSXETY5103 PLC modules allows remote authenticated users to send Modbus messages, and consequently execute arbitrary code, by embedding these messages in SOAP HTTP POST requests...
CVE-2013-2761: Improper Restriction of Operations within the Bounds of a Memory Buffer
The Schneider Electric M340 BMXNOE01xx and BMXP3420xx PLC modules allow remote authenticated users to cause a denial of service module crash via crafted FTP traffic, as demonstrated by the FileZilla FTP client...
PT-2013-1301
Name of the Vulnerable Software and Affected Versions Schneider Electric Quantum versions 140NOE77111 and 140NWM10000 M340 BMXNOE0110x Premium TSXETY5103 Description The issue allows remote authenticated users to execute arbitrary code by sending Modbus messages embedded in SOAP HTTP POST request...
PT-2013-3916 · Schneider Electric · Schneider Electric M340
Name of the Vulnerable Software and Affected Versions: Schneider Electric M340 PLC modules affected versions not specified Description: The issue allows remote attackers to cause a denial of service through resource consumption via unspecified vectors. The vendor reportedly disputes this issue,...
