CVE-2021-22792

A CWE-476: NULL Pointer Dereference vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU part numbers BMEP and BMEH, all versions, Modicon M340 CPU par...

CVE-2021-22791

A CWE-787: Out-of-bounds Write vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU part numbers BMEP and BMEH, all versions, Modicon M340 CPU part...

CVE-2021-22791

CVE-2021-22791 is a CWE-787 Out-of-bounds Write affecting Schneider Electric Modicon PLC line and related simulators. The root cause is upgrade-file validation failure in the controller application, which can lead to a Denial of Service when updating with a specially crafted project file. Affecte...

CVE-2021-22790

CVE-2021-22790 is an out-of-bounds read (CWE-125) vulnerability affecting Schneider Electric Modicon/M580/M340/MC80/Momentum Ethernet/Quantum/Premium CPUs and PLC simulators, triggered by a specially crafted project file. Root cause: out-of-bounds read could cause Denial of Service on Modicon PLC...

CVE-2021-22790

A CWE-125: Out-of-bounds Read vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU part numbers BMEP and BMEH, all versions, Modicon M340 CPU part...

CVE-2021-22789

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU part numbers BM...

多款 Schneider Electric 产品缓冲区错误漏洞

Schneider Electric Modicon M580 and others are products of Schneider Electric, France.Schneider Electric Modicon M580 is a programmable automation controller.Schneider Electric Modicon A buffer error vulnerability exists in multiple Schneider Electric products and originates from the controller...

The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers such as Modicon M340, Modicon Quantum, and Modicon Premium lies in the ability to disclose information, allowing unauthorized access to protected data.

The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers such as Modicon M340, Modicon Quantum, and Modicon Premium is related to the disclosure of information. Exploiting this vulnerability can allow unauthorized individuals to gain unauthorized access...

The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers such as Modicon M340, Modicon Quantum, and Modicon Premium lies in the insufficient checking of unusual or exceptional states. This allows a intruder to trigger a malfunction in maintenance by using a specially crafted HTTP packet.

The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers such as Modicon M340, Modicon Quantum, and Modicon Premium lies in the insufficient testing of unusual or exceptional states. Exploiting this vulnerability can allow an attacker operating remotely...

The vulnerability of the microprogrammed software of Schneider Electric’s Modicon M340 programmable logic controllers lies in the insufficient checking of unusual or exceptional states. This allows a intruder to trigger a malfunction during maintenance.

The vulnerability of the microprogrammed software of Schneider Electric’s Modicon M340 programmable logic controller is related to insufficient testing of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to cause malfunctions during maintenance operations...

The vulnerability of the microprogrammed logic controller Schneider Electric Modicon M340’s software lies in the possibility of writing beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the microprogrammed software of Schneider Electric’s Modicon M340 programmable logic controller lies in the writing beyond buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the programming software for PLCs (programmable logic controllers), namely EcoStruxure Control Expert, and the micro-programming software for Schneider Electric’s Modicon M340 and Modicon M580 models. This vulnerability exists due to the failure to take measures to neutralize certain special elements, allowing a perpetrator to execute arbitrary codes.

The vulnerability of the programming software for PLCs programmable logic controllers, namely EcoStruxure Control Expert, and the microsoftware for Schneider Electric Modicon M340 programmable logic controllers, exists due to the lack of measures to neutralize certain components. Exploiting this...

Schneider Modicon PAC Controller Has Industrial Control Device Vulnerability

The Schneider Electric M340 is mid-range PAC industrial process and infrastructure control. The Schneider Electric M340 has an industrial control device vulnerability that can be exploited by an attacker to remotely obtain a backdoor password, which can be used to connect to a password-protected...

Authorization Bypass Vulnerability in Schneider Electric Modicon PAC M580, M340

Schneider Electric SA is a global electrical company headquartered in France. An authorization bypass vulnerability exists in the Schneider Electric Modicon PAC M580, M340, which can be exploited by an attacker to cause a denial of service...

Design/Logic Flaw

Authentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert all versions prior to V15.0 SP1, including all versions of Unity Pro, EcoStruxure Control Expert V15.0 SP1, EcoStruxure Process Expert all versions, including all versions of EcoStruxure Hybrid DCS, SCADAPack...

CVE-2021-22779

Authentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert all versions prior to V15.0 SP1, including all versions of Unity Pro, EcoStruxure Control Expert V15.0 SP1, EcoStruxure Process Expert all versions, including all versions of EcoStruxure Hybrid DCS, SCADAPack...

CVE-2021-22779

Authentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert all versions prior to V15.0 SP1, including all versions of Unity Pro, EcoStruxure Control Expert V15.0 SP1, EcoStruxure Process Expert all versions, including all versions of EcoStruxure Hybrid DCS, SCADAPack...

CVE-2021-22779

The CVE-2021-22779 entry describes an Authentication Bypass by Spoofing vulnerability affecting Schneider Electric products including EcoStruxure Control Expert (pre- and post‑patch variants), EcoStruxure Process Expert, SCADAPack RemoteConnect for x70, and Modicon M580/M340 CPUs. The flaw enable...

The vulnerability of the microprogrammed software of Schneider Electric’s Modicon M340 programmable logic controllers stems from insufficient validation of input data. This allows a intruder to trigger malfunctions during maintenance operations.

The vulnerability of the microprogramming software of Schneider Electric’s Modicon M340 programmable logic controllers is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure by sending a specially...

Schneider Electric Web Server on Modicon M340

1. EXECUTIVE SUMMARY CVSS v3 6.3 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Schneider Electric Equipment: Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy Vulnerabilities: Out-of-bounds Read, Out-of-bounds Write, Classic Buffer Overflow 2. RISK...