Lucene search
+L

1724 matches found

BDU FSTEC
BDU FSTEC
added 2019/06/14 12:0 a.m.10 views

The vulnerability of the microprogrammed logic controller Modicon, caused by the disclosure of information that allows a intruder to access the information via SNMP.

The vulnerability of the programmable logic controller Modicon’s microprogramming software arises from the exposure of information. Exploiting this vulnerability allows a malicious actor to disclose SNMP information by reading files from the controller via the Modbus protocol...

7.5CVSS5.5AI score0.03413EPSS
SaveExploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:0 a.m.10 views

The vulnerability of the microprogrammed programmable logic controller Modicon, related to unprocessed exceptions, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed logic controller Modicon is related to unprocessed exceptions. Exploiting this vulnerability could allow a malicious actor to cause malfunctions during integrity checks of Modbus-protocol files with incorrect check sums...

7.5CVSS5.5AI score0.03289EPSS
SaveExploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:0 a.m.8 views

The vulnerability of the microprogrammed logic controller Modicon’s software, related to insufficient checking of exceptional states, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed programmable logic controller Modicon is related to insufficient testing of exceptional states. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause malfunctions by sending specially crafted Modbus packets to the...

7.5CVSS5.5AI score0.01129EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:0 a.m.9 views

The vulnerability of the microprogrammed logic controllers from Modicon, related to access control errors, allows a intruder to trigger a service failure or execute arbitrary code.

The vulnerability of the programmable logic controller Modicon’s microprogramming software is related to access control errors. Exploiting this vulnerability could allow an intruder to cause service failures or execute arbitrary code by modifying the controller’s configuration using the Modbus...

7.5CVSS5.9AI score0.03808EPSS
SaveExploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:0 a.m.8 views

The vulnerability of the microprogrammed logic controller Modicon, related to bypassing authentication through spoofing, allows a intruder to gain elevated privileges.

The vulnerability of the microprogrammed programmable logic controller Modicon relates to the bypassing of authentication procedures. Exploiting this vulnerability allows a malicious actor to increase their privileges by performing a “brute-force” attack on the Modbus protocol parameters sent to...

9.8CVSS5.5AI score0.35039EPSS
SaveExploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:0 a.m.10 views

The vulnerability of the microprogrammed programmable logic controller Modicon, related to unprocessed exceptions, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed logic controller Modicon is related to unprocessed exceptions. Exploiting this vulnerability could allow a malicious actor to cause malfunctions during maintenance operations when reading invalid blocks of physical memory in the controller using the Modbus...

7.5CVSS5.4AI score0.01821EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:0 a.m.7 views

The vulnerability of the microprogrammed programmable logic controller Modicon, related to unprocessed exceptions, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed logic controller Modicon is related to unprocessed exceptions. Exploiting this vulnerability could allow a malicious actor to cause malfunctions by sending inappropriate debugging parameters to the controller using the Modbus protocol...

7.5CVSS5.5AI score0.02304EPSS
SaveExploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:0 a.m.7 views

The vulnerability of the microprogrammed programmable logic controller Modicon, related to the violation of trust boundaries, allows a intruder to gain unauthorized access by performing a “forceful” attack against the Modbus protocol.

The vulnerability of the microprogrammed logic controllers from Modicon relates to the violation of trust boundaries during connection. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access by performing a “forceful” attack using the Modbus protocol...

9.8CVSS5.4AI score0.29575EPSS
SaveExploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:0 a.m.9 views

The vulnerability of the microprogrammed logic controller Modicon, related to errors in handling exceptional situations, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed programmable logic controller Modicon is related to errors in handling exceptional situations. Exploiting this vulnerability can allow an intruder, operating remotely, to cause malfunctions during the reading of memory blocks with invalid data sizes or wit...

7.5CVSS5.5AI score0.03289EPSS
SaveExploits1References3Affected Software4
Talos
Talos
added 2019/06/10 12:0 a.m.223 views

Schneider Electric UnityPro PLC simulator remote code execution vulnerability

Summary An exploitable remote code execution vulnerability exists in the UMAS strategy programming functionality of the Schneider Electric Unity Pro L Programming Software PLC Simulator. A specially crafted sequence of UMAS commands sent to the software’s PLC simulator can cause a modified strate...

9.8CVSS9.9AI score0.08161EPSS
SaveExploits1
Talos
Talos
added 2019/06/10 12:0 a.m.140 views

Schneider Electric Modicon M580 UnityPro reliance on untrusted inputs vulnerability

Summary An exploitable reliance on untrusted inputs vulnerability exists in the strategy transfer function of the Schneider Electric Unity Pro L Programming Software. When a specially crafted strategy is programmed to a Modicon M580 Programmable Automation Controller, and UnityProL is used to rea...

5.3CVSS5.6AI score0.01509EPSS
SaveExploits0
Talos
Talos
added 2019/06/10 12:0 a.m.164 views

Schneider Electric Modicon M580 UMAS strategy read information disclosure vulnerability

Summary An exploitable information disclosure vulnerability exists in the UMAS strategy read functionality of the Schneider Electric Modicon M580 Programmable Automation Controller firmware version SV2.70. A specially crafted UMAS command can cause the device to return blocks of the programmed...

7.5CVSS7.6AI score0.03413EPSS
SaveExploits1
Talos
Talos
added 2019/06/10 12:0 a.m.154 views

Schneider Electric Modicon M580 UMAS set breakpoint denial-of-service vulnerability

Summary An exploitable denial-of-service vulnerability exists in the UMAS set breakpoint functionality of the Schneider Electric Modicon M580 Programmable Automation Controller, firmware version SV2.70. A specially crafted UMAS command can cause the device to enter a non-recoverable fault state,...

7.5CVSS7.8AI score0.02648EPSS
SaveExploits1
Talos
Talos
added 2019/06/10 12:0 a.m.995 views

Schneider Electric Modicon M580 UMAS Read Memory Block Out Of Bounds Information Disclosure Vulnerability

Summary An exploitable information disclosure vulnerability exists in the UMAS memory block read functionality of the Schneider Electric Modicon M580 Programmable Automation Controller. A specially crafted UMAS request can cause an out of bounds read, resulting in disclosure of sensitive...

7.5CVSS7.7AI score0.03413EPSS
SaveExploits1
Talos
Talos
added 2019/06/10 12:0 a.m.215 views

Schneider Electric Modicon M580 UMAS read system blocks and bits information disclosure vulnerability

Summary An exploitable information disclosure vulnerability exists in the UMAS Read System Blocks and Bits functionality of the Schneider Electric Modicon M580 Programmable Automation Controller, firmware version SV2.70. A specially crafted UMAS command can cause the device to return blocks of...

7.5CVSS7.6AI score0.02298EPSS
SaveExploits1
Talos
Talos
added 2019/06/10 12:0 a.m.211 views

Schneider Electric Modicon M580 UMAS strategy transfer denial-of-service vulnerability

Summary An exploitable denial-of-service vulnerability exists in the UMAS strategy transfer functionality of the Schneider Electric Modicon M580 programmable automation controller firmware version SV2.70. A specially crafted UMAS command can cause the device to enter a recoverable fault state,...

7.5CVSS7.8AI score0.03289EPSS
SaveExploits1
Talos
Talos
added 2019/06/10 12:0 a.m.155 views

Schneider Electric Modicon M580 UMAS read memory block information disclosure vulnerability

Summary An exploitable information disclosure vulnerability exists in the UMAS read memory block function of the Schneider Electric Modicon M580 programmable automation controller, firmware version SV2.70. A specially crafted UMAS command can cause the device to return blocks of memory, resulting...

7.5CVSS7.6AI score0.03279EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2019/05/31 12:0 a.m.12 views

Schneider Electric Altivar ATV71HU40M3 Variable Speed Drive

Binary data 764256.prm...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/05/31 12:0 a.m.17 views

Schneider Electric Altivar ATV930U75M3 Variable Speed Drive

Binary data 764304.prm...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/05/31 12:0 a.m.17 views

Schneider Electric Altivar ATV61HU22M3 Variable Speed Drive

Binary data 764062.prm...

7.3AI score
SaveExploits0
Rows per page
Query Builder