CVE-2020-7536

CVE-2020-7536 affects Schneider Electric Modicon M340: CPUs (BMXP34* pre-V3.30) and Ethernet modules BMXNOE0100(H) pre-V3.4, BMXNOE0110(H) pre-V6.6, BMXNOR0200H all versions. Root cause: CWE-754 Improper Check for Unusual or Exceptional Conditions, leading to device unreachability when SNMP param...

PT-2020-19620 · Schneider Electric · Modicon M580 +3

Name of the Vulnerable Software and Affected Versions: Modicon M580 affected versions not specified Modicon M340 affected versions not specified Legacy Controllers Modicon Quantum affected versions not specified Legacy Controllers Modicon Premium affected versions not specified Description: A...

PT-2020-19625

Name of the Vulnerable Software and Affected Versions Modicon M340 versions affected versions not specified Modicon Quantum versions affected versions not specified Modicon Premium versions affected versions not specified Description A vulnerability exists in the Web Server of the affected device...

PT-2020-19621 · Schneider Electric · Modicon M580 +3

Name of the Vulnerable Software and Affected Versions: Modicon M580 affected versions not specified Modicon M340 affected versions not specified Legacy Controllers Modicon Quantum affected versions not specified Legacy Controllers Modicon Premium affected versions not specified Description: A...

Schneider Electric Modicon M340 Path Traversal Vulnerability

The Schneider Electric Modicon M340 is a medium range PLC Programmable Logic Controller for industrial processes and infrastructure from Schneider Electric, France. A path traversal vulnerability exists in the Web Server on Modicon M340 that stems from improperly restricting the pathname of a...

Schneider Electric Modicon M340 代码问题漏洞

The Schneider Electric Modicon M340 is a mid-range PLC programmable logic controller for industrial processes and infrastructure from Schneider Electric, France. A code issue vulnerability exists in the Schneider Electric Modicon M340, which can be exploited by an attacker to compile a request to...

Multiple Schneider Electric Products Code Issue Vulnerabilities

The Schneider Electric Modicon M580 is a programmable automation controller.The Schneider Electric Modicon Premium is a large programmable logic controller PLC for discrete or process applications.The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process...

Schneider Electric Modicon M340 Code Issue Vulnerability

The Schneider Electric Modicon M340 is a mid-range PLC Programmable Logic Controller for industrial processes and infrastructure from Schneider Electric France. A security vulnerability exists in the Modicon that could be exploited by an attacker to cause a denial of service on the device. The...

Multiple Schneider Electric Products Information Disclosure Vulnerabilities

Schneider Electric Modicon Quantum and others are products of Schneider Electric, France.Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process applications, high availability and safety solutions.Schneider Electric Modicon M340 is a mid-range PLC programmable...

The vulnerability of the microprogramming software for Schneider Electric Modicon Quantum and Schneider Electric Modicon M340 allows a hacker to obtain information about the SMTP server configuration, including user logins and passwords.

The vulnerability of the microprogramming software in Schneider Electric Modicon Quantum and Schneider Electric Modicon M340 controllers is related to security mechanism failures. Exploiting this vulnerability can allow attackers to obtain information about the SMTP server configuration, includin...

Multiple Schneider Electric Products Code Issue Vulnerabilities

The Schneider Electric Modicon M580 is a programmable automation controller.The Schneider Electric Modicon Premium is a large programmable logic controller PLC for discrete or process applications.The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process...

Multiple Schneider Electric Product Code Issue Vulnerabilities

Schneider Electric Modicon Premium and others are products of Schneider Electric, France.Schneider Electric Modicon Premium is a large programmable logic controller PLC for discrete or process applications. The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for...

Multiple Schneider Electric Products Code Issue Vulnerabilities

The Schneider Electric Modicon M580 is a programmable automation controller.The Schneider Electric Modicon Premium is a large programmable logic controller PLC for discrete or process applications.The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process...

PT-2020-6372 · Schneider Electric · Modicon M580 +3

Name of the Vulnerable Software and Affected Versions: Modicon M580 affected versions not specified Modicon M340 affected versions not specified Legacy Controllers Modicon Quantum affected versions not specified Modicon Premium affected versions not specified Description: A vulnerability exists...

PT-2020-6376 · Schneider Electric · Modicon M340 +2

Name of the Vulnerable Software and Affected Versions: Modicon M340 versions affected versions not specified Modicon Quantum versions affected versions not specified Modicon Premium versions affected versions not specified Description: The issue is related to the lack of authentication for a...

PT-2020-6330 · Schneider Electric · Modicon M340 +2

Name of the Vulnerable Software and Affected Versions: Modicon M340, Modicon Quantum, Modicon Premium affected versions not specified Description: The issue is related to improper limitation of a pathname to a restricted directory, which could allow a remote attacker to gain unauthorized access t...

PT-2020-6371 · Schneider Electric · Modicon M340 +2

Name of the Vulnerable Software and Affected Versions: Modicon M340, Modicon Quantum, Modicon Premium affected versions not specified Description: The issue is related to insufficient checking of unusual or exceptional conditions in the software of programmable logic controllers. This could allow...

CVE-2020-7533

CWE-287: Improper Authentication vulnerability exists which could cause the execution of commands on the webserver without authentication when sending specially crafted HTTP requests...

CVE-2020-7533

CVE-2020-7533 is a credential management/improper authentication issue affecting Schneider Electric Modicon Web Server components on M340, Quantum, and Premium Legacy offers, plus their Communication Modules. The vulnerability could allow an unauthenticated attacker to cause the web server to exe...

CVE-2020-7533

CWE-287: Improper Authentication vulnerability exists which could cause the execution of commands on the webserver without authentication when sending specially crafted HTTP requests...