CVE-2018-7848

CVE-2018-7848 Productos afectados Schneider Electric Modicon M580 Versión 2.90 Schneider Electric Modicon M340 Versión 3.10 Schneider Electric Modicon Premium Todas las versiones Schneider Electric Modicon Quantum Todas las versiones Referencias...

CVE-2018-7845

CVE-2018-7845 Productos afectados Schneider Electric Modicon M580 Versión 2.80 Schneider Electric Modicon M340 Versión 3.01 Schneider Electric Modicon Premium Versión 3.20 Schneider Electric Modicon Quantum Versión 3.60 Referencias https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2018-7842

CVE-2018-7842 Productos afectados Schneider Electric Modicon M580 Versión 2.90 Schneider Electric Modicon M340 Versión 3.10 Schneider Electric Modicon Premium Todas las versiones Schneider Electric Modicon Quantum Todas las versiones Referencias...

CVE-2018-7849

CVE-2018-7849 Productos Afectados Schneider Electric Modicon M580 Versión 2.90 Schneider Electric Modicon M340 Versión 3.10 Schneider Electric Modicon Premium Todas las Versiones Schneider Electric Modicon Quantum Todas las Versiones Referencias...

CVE-2018-7852

CVE-2018-7852 Productos afectados Schneider Electric Modicon M580 Versión 2.80 Schneider Electric Modicon M340 Versión 3.01 Schneider Electric Modicon Premium Versión 3.20 Schneider Electric Modicon Quantum Versión 3.60 Referencias https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2018-7854

CVE-2018-7854 Productos afectados Schneider Electric Modicon M580 Versión 2.90 Schneider Electric Modicon M340 Versión 3.10 Referencias https://www.se.com/ww/en/download/document/SEVD-2019-134-11/ https://www.talosintelligence.com/vulnerabilityreports/TALOS-2019-0765 Uso python CVE-2018-7854.py...

CVE-2018-7846

CVE-2018-7846 Productos afectados Schneider Electric Modicon M580 Versión 2.90 Schneider Electric Modicon M340 Versión 3.10 Schneider Electric Modicon Premium Todas las versiones Schneider Electric Modicon Quantum Todas las versiones Referencias...

CVE-2018-7844

CVE-2018-7844 Productos Afectados Schneider Electric Modicon M580 Todas las versiones Schneider Electric Modicon M340 Todas las versiones Schneider Electric Modicon Premium Todas las versiones Schneider Electric Modicon Quantum Todas las versiones Referencias...

CVE-2018-7843

CVE-2018-7843 Productos Afectados Schneider Electric Modicon M580 Versión 2.80 Schneider Electric Modicon M340 Versión 3.10 Schneider Electric Modicon Premium Versión 3.20 Schneider Electric Modicon Quantum Versión 3.60 Referencias https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

PT-2026-89045

News: Schneider Electric, Siemens, and Aveva ship ICS Patch Tuesday. Worst new hit: Modicon M580 auth CVE-2026-3869 CVSS 9.2. Siemens flags critical Reyrolle 7SR5, OIS, Industrial Edge bugs. OT owners: patch controllers now. https://t.co/TT7I5NW8Ee...

Schneider Electric Modicon Controllers M241, M251, M258, and LMC058 Improper Neutralization of Input During Web Page Generation (CVE-2025-13902)

CWE-79 Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists that could cause condition where authenticated attackers can have a victim's browser run arbitrary JavaScript when the victim hovers over a maliciously crafted element on a web server...

Schneider Electric Modicon M241, M251, and M262 Improper Resource Shutdown or Release (CVE-2025-13901)

CWE-404 Improper Resource Shutdown or Release vulnerability exists that could cause partial Denial of Service on Machine Expert protocol when an unauthenticated attacker sends malicious payload to occupy active communication channels. This plugin only works with Tenable.ot. Please visit...

The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers Modicon M241, Modicon M251, and Modicon M262 arises from improper cleaning or release of resources, allowing a intruder to trigger malfunctions during maintenance.

The vulnerability of microprogrammed software in Schneider Electric’s Modicon M241, Modicon M251, and Modicon M262 programmable logic controllers is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause malfunctions in the system remote...

The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers, such as Modicon M241, Modicon M251, Modicon M258, and Modicon LMC058, stems from the lack of protective measures for website structures. This allows attackers to perform cross-site scripting attacks.

The vulnerability of microprogrammed software in Schneider Electric’s Modicon M241, Modicon M251, Modicon M258, and Modicon LMC058 programmable logic controllers is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a remote attacker to...

Schneider Electric多款产品 跨站脚本漏洞

Schneider Electric Modicon M258 is a product of the French company Schneider Electric. Schneider Electric Modicon M258 is a programmable automation controller. Schneider Electric Modicon M241 is a programmable logic controller. Schneider Electric Modicon M251 is also a programmable logic...

Schneider Electric多款产品 安全漏洞

Schneider Electric Modicon M241, among others, are programmable logic controllers produced by Schneider Electric, a French company. Several products from Schneider Electric have security vulnerabilities. These vulnerabilities stem from improper resource closure or release procedures, which may...

CVE-2021-22792

A CWE-476: NULL Pointer Dereference vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU part numbers BMEP and BMEH, all versions, Modicon M340 CPU par...

CVE-2021-22785

A CWE-200: Information Exposure vulnerability exists that could cause sensitive information of files located in the web root directory to leak when an attacker sends a HTTP request to the web server of the device. Affected Product: Modicon M340 CPUs: BMXP34 Versions prior to V3.40, Modicon M340 X...

CVE-2021-22749

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Modicon X80 BMXNOR0200H RTU SV1.70 IR22 and prior that could cause information leak concerning the current RTU configuration including communication parameters dedicated to telemetry, when a specially...

CVE-2021-22790

A CWE-125: Out-of-bounds Read vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU part numbers BMEP and BMEH, all versions, Modicon M340 CPU part...