Lucene search
+L

1693 matches found

ICS
ICS
added 2017/03/30 12:0 a.m.78 views

Schneider Electric Modicon PLCs

CVSS v3 7.5 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Schneider Electric Equipment: Modicon PLCs Vulnerability: Predictable Value Range from Previous Values, Use of Insufficiently Random Values, Insufficiently Protected Credentials AFFECTED PRODUCTS The following version...

9.1CVSS8.6AI score0.3182EPSS
SaveExploits5References3
OpenVAS
OpenVAS
added 2017/03/03 12:0 a.m.85 views

Schneider Electric Modicon Devices DoS Vulnerability (SEVD-2017-048-02)

Schneider Electric Modicon devices are prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

7.8CVSS7.5AI score0.04807EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2017/02/28 12:0 a.m.34 views

Modicon Modbus/TCP UnityPro Programming Function Code Access

Binary data scadamodbusmodiconproject.nbin...

7.3AI score
SaveExploits0
ICS
ICS
added 2017/02/23 12:0 a.m.234 views

Schneider Electric Modicon M340 PLC (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Remotely exploitable/low-skill level to exploit Vendor: Schneider Electric Equipment: Modicon M340 PLC Vulnerability: Resource Exhaustion 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-17-054-03 Schneider...

7.8CVSS8.2AI score0.04807EPSS
SaveExploits0References6
OpenVAS
OpenVAS
added 2017/02/09 12:0 a.m.81 views

Schneider Electric Modicon M340 Devices Buffer Overflow Vulnerability (SEVD-2015-344-01)

Schneider Electric Modicon M340 devices are prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

10CVSS6.8AI score0.07351EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2016/07/07 12:0 a.m.17 views

The vulnerability of the microprogramming software of Schneider Electric’s Modicon Quantum programmable logic controllers allows a malicious individual to gain unauthorized access to the device.

The microprogrammed software of the 140NOE77111 module of Schneider Electric’s Modicon Quantum controller contains numerous login pairs—passwords that are pre-set by default. This allows any user who has access to the device via FTP protocol to gain authorized access to the device...

10CVSS5.5AI score0.03894EPSS
SaveExploits1References2Affected Software1
seebug.org
seebug.org
added 2016/03/22 12:0 a.m.20 views

施耐德 Modicon M340 PLC Web登录验证栈溢出漏洞

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2016/01/11 12:0 a.m.30 views

Schneider Electric Modicon M340 for Ethernet 弱口令

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2016/01/11 12:0 a.m.38 views

Schneider Electric Modicon Quantum 弱口令

No description provided by source...

7.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2015/12/29 12:0 a.m.9 views

The vulnerability of the microprogramming software of Schneider Electric’s Modicon M340 allows a intruder to execute any desired code.

The vulnerability of the microprogrammed logic controller Schneider Electric Modicon M340 arises from buffer overflow in the stack. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code through a long password in HTTP Basic Authentication...

10CVSS7.9AI score0.07351EPSS
SaveExploits1References3
CNVD
CNVD
added 2015/12/23 12:0 a.m.9 views

Schneider Electric Modicon M340 PLC BMXNOx and BMXPx Stack Buffer Overflow Vulnerability

Schneider Electric Modicon M340 PLC BMXNOx and BMXPx are programmable controller products from Schneider Electric, France.GoAhead Web Server is one of the embedded web servers. A stack buffer overflow vulnerability exists in the GoAhead Web Server for Schneider Electric Modicon M340 PLC BMXNOx an...

10CVSS8.2AI score0.07351EPSS
SaveExploits1References1
NVD
NVD
added 2015/12/21 11:59 a.m.30 views

CVE-2015-7937

Stack-based buffer overflow in the GoAhead Web Server on Schneider Electric Modicon M340 PLC BMXNOx and BMXPx devices allows remote attackers to execute arbitrary code via a long password in HTTP Basic Authentication data...

10CVSS8.3AI score0.07351EPSS
SaveExploits1References3
Prion
Prion
added 2015/12/21 11:59 a.m.22 views

Stack overflow

Stack-based buffer overflow in the GoAhead Web Server on Schneider Electric Modicon M340 PLC BMXNOx and BMXPx devices allows remote attackers to execute arbitrary code via a long password in HTTP Basic Authentication data...

10CVSS9AI score0.07351EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2015/12/21 11:59 a.m.6 views

CVE-2015-7937

Stack-based buffer overflow in the GoAhead Web Server on Schneider Electric Modicon M340 PLC BMXNOx and BMXPx devices allows remote attackers to execute arbitrary code via a long password in HTTP Basic Authentication data...

10CVSS6.4AI score0.07351EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2015/12/21 11:0 a.m.27 views

CVE-2015-7937

Stack-based buffer overflow in the GoAhead Web Server on Schneider Electric Modicon M340 PLC BMXNOx and BMXPx devices allows remote attackers to execute arbitrary code via a long password in HTTP Basic Authentication data...

8.3AI score0.07351EPSS
SaveExploits1References3
CVE
CVE
added 2015/12/21 11:0 a.m.86 views

CVE-2015-7937

Schneider Electric Modicon M340 PLC BMXNOx/BMXPx devices running the GoAhead Web Server are affected by CVE-2015-7937: a stack-based buffer overflow triggered by a long password in HTTP Basic Authentication data, enabling remote code execution. Evidence from multiple sources (NVD entry, ICS-CERT ...

10CVSS8.6AI score0.07351EPSS
SaveExploits1References3Affected Software13
Positive Technologies
Positive Technologies
added 2015/12/21 12:0 a.m.12 views

PT-2015-2899 · Schneider Electric +1 · Modicon M340 Plc +1

Name of the Vulnerable Software and Affected Versions: Schneider Electric Modicon M340 PLC BMXNOx and BMXPx devices affected versions not specified Description: The issue is caused by a stack-based buffer overflow in the GoAhead Web Server, allowing remote attackers to execute arbitrary code via ...

10CVSS8.7AI score0.07351EPSS
SaveExploits1References5
ThreatPost
ThreatPost
added 2015/12/18 12:9 p.m.20 views

Schneider Electric Patches Buffer Overflow in PLC Line

Automation and energy management company Schneider Electric patched a vulnerability in a product line this week that was leaving a handful of programmable automation controllers at risk of being hacked. Thirteen different builds of the Modicon M340 PLC are affected by the vulnerability, a buffer...

1.7AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2015/10/21 12:0 a.m.12 views

The vulnerability of the microprogramming software of Schneider Electric’s Modicon M340 programmable logic controller allows a remote intruder to trigger a service failure.

The vulnerability of the embedded software of Schneider Electric’s programmable logic controller Modicon M340 arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to cause malfunctions by sending specially crafted FTP or...

7.8CVSS7.4AI score0.04928EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2015/10/21 12:0 a.m.12 views

The vulnerability of the microprogramming software of Schneider Electric’s Modicon M340 programmable logic controller allows a remote intruder to execute any desired code.

The vulnerability of the microprogrammed software of Schneider Electric’s Modicon M340 programmable logic controller is due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to inject JavaScript code into the device remotely...

4.3CVSS6.4AI score0.02242EPSS
SaveExploits0References4
Rows per page
Query Builder