Lucene search
+L

1693 matches found

BDU FSTEC
BDU FSTEC
added 2019/06/18 12:00 a.m.9 views

The vulnerability of the microprogrammed programmable logic controller Modicon, related to access control errors, allows a intruder to execute arbitrary code.

The vulnerability of the microprogrammed programmable logic controller Modicon is related to access control errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by modifying the controller’s configuration using the Modbus protocol...

10CVSS6AI score0.08161EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:00 a.m.8 views

The vulnerability of the microprogrammed logic controller Modicon’s software, related to insufficient checking of exceptional states, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed programmable logic controller Modicon is related to insufficient testing of exceptional states. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause malfunctions by sending specially crafted Modbus packets to the...

7.5CVSS5.5AI score0.01129EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:00 a.m.13 views

The vulnerability of the microprogrammed programmable logic controller Modicon, related to reading buffers from external sources, allows a intruder to disclose protected information.

The vulnerability of the microprogrammed programmable logic controller Modicon relates to the reading of buffers from external sources. Exploiting this vulnerability can allow an intruder, operating remotely, to disclose sensitive information by reading certain memory blocks in the controller via...

7.5CVSS5.4AI score0.03413EPSS
SaveExploits1References3Affected Software4
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:00 a.m.9 views

The vulnerability of the microprogrammed logic controllers from Modicon, related to access control errors, allows a intruder to trigger a service failure or execute arbitrary code.

The vulnerability of the programmable logic controller Modicon’s microprogramming software is related to access control errors. Exploiting this vulnerability could allow an intruder to cause service failures or execute arbitrary code by modifying the controller’s configuration using the Modbus...

7.5CVSS5.9AI score0.03808EPSS
SaveExploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:00 a.m.10 views

The vulnerability of the microprogrammed programmable logic controller Modicon, related to unprocessed exceptions, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed logic controller Modicon is related to unprocessed exceptions. Exploiting this vulnerability could allow a malicious actor to cause malfunctions during integrity checks of Modbus-protocol files with incorrect check sums...

7.5CVSS5.5AI score0.03289EPSS
SaveExploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:00 a.m.8 views

The vulnerability of the microprogrammed programmable logic controller Modicon, related to the use of insufficiently random values, allows a intruder to intercept TCP connections.

The vulnerability of the microprogrammed programmable logic controller Modicon is related to the use of insufficiently random values. Exploiting this vulnerability could allow a malicious actor to intercept TCP connections remotely...

7.5CVSS5.4AI score0.0193EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:00 a.m.11 views

The vulnerability of the microprogrammed logic controller Modicon, caused by the disclosure of information that allows a intruder to access the information via SNMP.

The vulnerability of the programmable logic controller Modicon’s microprogramming software arises from the exposure of information. Exploiting this vulnerability allows a malicious actor to disclose SNMP information by reading files from the controller via the Modbus protocol...

7.5CVSS5.5AI score0.03413EPSS
SaveExploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:00 a.m.12 views

The vulnerability of microprogrammed software in Modicon, ATV IMC, and PacDrive programmable logic controllers lies in the lack of authentication for a critical function, allowing an intruder to alter the device’s configuration.

The vulnerability of microprogrammed software in Modicon, ATV IMC, and PacDrive programmable logic controllers is related to the absence of authentication for the critical function. Exploiting this vulnerability allows a malicious actor to remotely alter the device’s configuration IP address,...

8.2CVSS7.1AI score0.0125EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:00 a.m.10 views

The vulnerability of the microprogrammed programmable logic controller Modicon, related to unprocessed exceptions, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed logic controller Modicon is related to unprocessed exceptions. Exploiting this vulnerability could allow a malicious actor to cause malfunctions during maintenance operations when reading invalid blocks of physical memory in the controller using the Modbus...

7.5CVSS5.4AI score0.01821EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:00 a.m.8 views

The vulnerability of the microprogrammed logic controller Modicon, related to bypassing authentication through spoofing, allows a intruder to gain elevated privileges.

The vulnerability of the microprogrammed programmable logic controller Modicon relates to the bypassing of authentication procedures. Exploiting this vulnerability allows a malicious actor to increase their privileges by performing a “brute-force” attack on the Modbus protocol parameters sent to...

9.8CVSS5.5AI score0.35039EPSS
SaveExploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:00 a.m.8 views

The vulnerability of the microprogrammed programmable logic controller Modicon, related to its dependence on unreliable input data during security decision-making, allows a intruder to provide incorrect information.

The vulnerability of the microprogrammed programmable logic controller Modicon is related to its dependence on unreliable input data during security decision-making. Exploiting this vulnerability could allow a malicious actor to provide incorrect information displayed in the Unity Pro software...

5.3CVSS7.8AI score0.01509EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:00 a.m.7 views

The vulnerability of the microprogrammed programmable logic controller Modicon, related to unprocessed exceptions, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed logic controller Modicon is related to unprocessed exceptions. Exploiting this vulnerability could allow a malicious actor to cause malfunctions by sending inappropriate debugging parameters to the controller using the Modbus protocol...

7.5CVSS5.5AI score0.02304EPSS
SaveExploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:00 a.m.10 views

The vulnerability of the microprogrammed logic controller Modicon, related to errors in handling exceptional situations, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed programmable logic controller Modicon is related to errors in handling exceptional situations. Exploiting this vulnerability can allow an intruder, operating remotely, to cause malfunctions during the reading of memory blocks with invalid data sizes or wit...

7.5CVSS5.5AI score0.03289EPSS
SaveExploits1References3Affected Software4
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:00 a.m.7 views

The vulnerability of the microprogrammed programmable logic controller Modicon, related to the violation of trust boundaries, allows a intruder to gain unauthorized access by performing a “forceful” attack against the Modbus protocol.

The vulnerability of the microprogrammed logic controllers from Modicon relates to the violation of trust boundaries during connection. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access by performing a “forceful” attack using the Modbus protocol...

9.8CVSS5.4AI score0.29575EPSS
SaveExploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:00 a.m.12 views

The vulnerability of the microprogrammed programmable logic controller Modicon, related to unprocessed exceptions, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed logic controller Modicon is related to unprocessed exceptions. Exploiting this vulnerability can allow a malicious actor to cause malfunctions by sending invalid parameters to the controller using the Modbus protocol...

7.5CVSS5.5AI score0.02648EPSS
SaveExploits1References3Affected Software2
Talos
Talos
added 2019/06/10 12:00 a.m.165 views

Schneider Electric Modicon M580 UMAS strategy read information disclosure vulnerability

Summary An exploitable information disclosure vulnerability exists in the UMAS strategy read functionality of the Schneider Electric Modicon M580 Programmable Automation Controller firmware version SV2.70. A specially crafted UMAS command can cause the device to return blocks of the programmed...

7.5CVSS7.6AI score0.03413EPSS
SaveExploits1
Talos
Talos
added 2019/06/10 12:00 a.m.155 views

Schneider Electric Modicon M580 UMAS set breakpoint denial-of-service vulnerability

Summary An exploitable denial-of-service vulnerability exists in the UMAS set breakpoint functionality of the Schneider Electric Modicon M580 Programmable Automation Controller, firmware version SV2.70. A specially crafted UMAS command can cause the device to enter a non-recoverable fault state,...

7.5CVSS7.8AI score0.02648EPSS
SaveExploits1
Talos
Talos
added 2019/06/10 12:00 a.m.229 views

Schneider Electric Modicon M580 UMAS Strategy File Write Vulnerability

Summary An exploitable unauthenticated file write vulnerability exists in the UMAS strategy programming functionality of the Schneider Electric Modicon M580 Programmable Automation Controller firmware version SV2.70. A specially crafted sequence of UMAS commands can cause the device to overwrite...

9.8CVSS9.7AI score0.03808EPSS
SaveExploits1
Talos
Talos
added 2019/06/10 12:00 a.m.231 views

Schneider Electric Modicon M580 UMAS release reservation denial-of-service vulnerability

Summary An exploitable denial-of-service vulnerability exists in the UMAS Release PLC Reservation function of the Schneider Electric Modicon M580 Programmable Automation Controller, firmware version SV2.70. A specially crafted UMAS command can cause the device to invalidate a session without...

9.8CVSS9.7AI score0.29575EPSS
SaveExploits1
Talos
Talos
added 2019/06/10 12:00 a.m.211 views

Schneider Electric Modicon M580 UMAS memory block read denial-of-service vulnerability

Summary An exploitable denial-of-service vulnerability exists in the UMAS memory block read function of the Schneider Electric Modicon M580 programmable automation controller, firmware version SV2.70. A specially crafted UMAS command can cause the device to enter a non-recoverable fault state,...

7.5CVSS7.7AI score0.03289EPSS
SaveExploits1
Rows per page
Query Builder