CVE-2018-7240

A vulnerability exists in Schneider Electric's Modicon Quantum in all versions of the communication modules which could allow arbitrary code execution. An FTP command used to upgrade the firmware of the module can be misused to cause a denial of service, or in extreme cases, to load a malicious...

CVE-2018-7761

A vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow arbitrary code execution...

Design/Logic Flaw

A vulnerability exists in Schneider Electric's Modicon Quantum in all versions of the communication modules which could allow arbitrary code execution. An FTP command used to upgrade the firmware of the module can be misused to cause a denial of service, or in extreme cases, to load a malicious...

CVE-2018-7759

A buffer overflow vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. The buffer overflow vulnerability is caused by the length of the source string specified instead of the buffer size as the number of bytes to be copied...

Design/Logic Flaw

A vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow arbitrary code execution...

CVE-2018-7240

A vulnerability exists in Schneider Electric's Modicon Quantum in all versions of the communication modules which could allow arbitrary code execution. An FTP command used to upgrade the firmware of the module can be misused to cause a denial of service, or in extreme cases, to load a malicious...

CVE-2018-7760

An authorization bypass vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. Requests to CGI functions allow malicious users to bypass authorization...

CVE-2018-7242

Vulnerable hash algorithms exists in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules. The algorithm used to encrypt the password is vulnerable to hash collision attacks...

CVE-2018-7241

Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules...

CVE-2018-7241

CVE-2018-7241 affects Schneider Electric Modicon Premium, Quantum, M340, and BMXNOR0200 controllers. The issue is hard-coded accounts present in all versions of the devices’ communication modules, enabling unauthorized access via the FTP/communication interfaces. The underlying risk is high (desc...

CVE-2018-7240

CVE-2018-7240 affects Schneider Electric Modicon Premium, Quantum, M340, and BMXNOR0200 series controllers. The vulnerability is a stack-based buffer overflow in the FTP server used for firmware upgrades, which could allow arbitrary code execution or, in extreme cases, malicious firmware loading ...

CVE-2018-7761

A vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow arbitrary code execution...

CVE-2018-7759

CVE-2018-7759 describes a buffer overflow in Schneider Electric Modicon M340, Premium, Quantum PLCs and BMXNOR0200 caused by using the length of the source string (not the buffer size) as the copy size. This vulnerability can enable a remote attacker to cause a denial of service. A vendor advisor...

Stack Buffer Overflow Vulnerability in Various Schneider Electric Products

Schneider Electric Modicon Premium\Modicon Quantum\Modicon M340\Modicon BMXNOR0200 are programmable controllers from Schneider Electric, France. A stack buffer overflow vulnerability exists in various Schneider Electric products, which stems from the FTP server not limiting the length of the...

Weak Encryption Algorithm Vulnerability in Various Schneider Electric Products

Schneider Electric Modicon Premium\Modicon Quantum\Modicon M340\Modicon BMXNOR0200 are programmable controllers from Schneider Electric, France. A weak cryptographic algorithm vulnerability exists in various Schneider Electric products, which stems from the FTP server not limiting the length of...

PT-2018-15: Arbitrary Code Execution in Schneider Electric's Modicon Quantum

The specialists of the Positive Research center have detected an Arbitrary Code Execution vulnerability in Schneider Electric's Modicon Quantum. A vulnerability allows attackers to execute arbitrary code, cause a denial of service, or load a malicious firmware via an FTP command used to upgrade t...

PT-2018-19: Authorization Bypass in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200

The specialists of the Positive Research center have detected an Authorization Bypass vulnerability in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200. Vulnerability allows attackers to bypass authorization using requests to CGI functions. How to fix Use the...

PT-2017-3704 · Schneider Electric · Modicon Premium +3

Name of the Vulnerable Software and Affected Versions: Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 affected versions not specified Description: A buffer overflow issue exists in the web services that process SOAP requests, potentially allowing a remote...

PT-2017-3701 · Schneider Electric · Modicon Premium +3

Name of the Vulnerable Software and Affected Versions: Schneider Electric Modicon M340 versions affected versions not specified Schneider Electric Modicon Premium versions affected versions not specified Schneider Electric Modicon Quantum versions affected versions not specified Schneider Electri...

PT-2017-3703 · Schneider Electric · Modicon Premium +3

Name of the Vulnerable Software and Affected Versions: Schneider Electric Modicon BMXNOR0200 affected versions not specified Schneider Electric Modicon M340 affected versions not specified Schneider Electric Modicon Premium affected versions not specified Schneider Electric Modicon Quantum PLC...