3068 matches found
Arbitrary File Read Vulnerability in DCCE MAC1100 PLCs
The MAC1100 PLC Programmable Logic Controller PLC is a product in the Dalian Computer Control DCCE Programmable Logic Controller PLC series. An arbitrary file read vulnerability exists in the DCCE MAC1100 PLC. An attacker can exploit this vulnerability to read the contents of any variable area of...
When Your Employees Post Passwords Online
Storing passwords in plaintext online is never a good idea, but it's remarkable how many companies have employees who are doing just that using online collaboration tools like Trello.com. Last week, KrebsOnSecurity notified a host of companies that employees were using Trello to share passwords f...
Denial of Service Vulnerability in MXProgrammer Software
MXProgrammer software is a windows desktop software of Weihai Mack Electric Technology Co., Ltd. which is used to communicate with its MX series PLC products and complete the functions of program writing and downloading. A denial of service vulnerability exists in the MXProgrammer software. When...
CVE-2018-7761
A vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow arbitrary code execution...
Buffer overflow
A vulnerability exists in the web services to process SOAP requests in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow result in a buffer overflow...
CVE-2018-7759
A buffer overflow vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. The buffer overflow vulnerability is caused by the length of the source string specified instead of the buffer size as the number of bytes to be copied...
CVE-2018-7760
An authorization bypass vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. Requests to CGI functions allow malicious users to bypass authorization...
Design/Logic Flaw
A vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow arbitrary code execution...
CVE-2018-7762
A vulnerability exists in the web services to process SOAP requests in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow result in a buffer overflow...
Authorization
An authorization bypass vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. Requests to CGI functions allow malicious users to bypass authorization...
CVE-2018-7759
A buffer overflow vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. The buffer overflow vulnerability is caused by the length of the source string specified instead of the buffer size as the number of bytes to be copied...
CVE-2018-7760
Affected products: Schneider Electric Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. Vulnerability: authorization bypass in CGI functions of the embedded web server, allowing remote attackers to bypass authentication. Root cause: authentication mechanism weaknesses in CGI handlin...
CVE-2018-7762
A vulnerability in Schneider Electric’s Modicon M340, Modicon Premium, and Modicon Quantum PLCs (BMXNOR0200) affects the web services that process SOAP requests, where an input handling flaw could trigger a buffer overflow. This could cause a denial of service. Public details point to a buffer-ov...
CVE-2018-7760
An authorization bypass vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. Requests to CGI functions allow malicious users to bypass authorization...
CVE-2018-7759
CVE-2018-7759 describes a buffer overflow in Schneider Electric Modicon M340, Premium, Quantum PLCs and BMXNOR0200 caused by using the length of the source string (not the buffer size) as the copy size. This vulnerability can enable a remote attacker to cause a denial of service. A vendor advisor...
Denial of Service Vulnerability in MXProgrammer Software
MXProgrammer software is a windows desktop software of Weihai Mack Electric Technology Co., Ltd. which is used to communicate with its MX series PLC products and complete the functions of program writing and downloading. A denial of service vulnerability exists in the MXProgrammer software. The...
Information Disclosure Vulnerability in DCCE MAC1100 PLCs
MAC1100 PLC programmable logic controller PLC is a product in the programmable logic controller PLC series of Dalian Computer Control DCCE. The product is widely used in intelligent buildings, power data monitoring, heat control system, enterprise management system and other important industrial...
Remote Control Vulnerability in MAC1100 PLCs
The MAC1100 PLC Programmable Logic Controller PLC is a product in the Dalian Computer Control DCCE Programmable Logic Controller PLC series. A remote control vulnerability exists in the MAC1100 PLC. An attacker can use the vulnerability to remotely and directly control the start and stop of the...
