Rockwell Automation/Allen-Bradley MicroLogix 1400 Series A <= 7 and Series B <= 15.000 DNP3 Remote DoS

Binary data 64.prm...

Schneider Electric Modicon M340 PLCs Buffer Overflow

Binary data 720075.prm...

Siemens SIMATIC S7-1500 < 1.5 and S7-1200 PLCs < 4.0 Cross Site Request Forgery

Binary data 720192.prm...

Schneider Electric Modicon PLCs Predictable Value Range

Binary data 720116.prm...

Siemens SIMATIC S7-1500 PLCs < 1.5 Web Server Open Redirect

Binary data 720191.prm...

Siemens SIMATIC S7-1200 PLCs 2.x and 3.x ISO-TSAP Port DOS

Binary data 720187.prm...

Schneider Electric Multiple PLCs Improper Authentication

Binary data 720033.prm...

Siemens SIMATIC S7-1200 PLCs 2.x <= 3.0.1 XSS

Binary data 720022.prm...

Siemens SIMATIC S7-1200 PLCs < 4.0 Random Number Generator Insufficient Entropy

Binary data 720193.prm...

Siemens SIMATIC S7-1500 PLCs < 1.5 Random Number Generator Insufficient Entropy

Binary data 720194.prm...

Schneider Electric Modicon M241 and M251 PLCs Insufficiently Random Values

Binary data 720114.prm...

Schneider Electric Modicon M241 and M251 PLCs Insufficiently Protected Credentials

Binary data 720115.prm...

Siemens SIMATIC S7-1500 PLCs < 1.5 HTTPS Packets DOS

Binary data 720202.prm...

Code injection

ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. Researchers have found some controllers are susceptible to a denial-of-service attack due to a flood of network packets...

CVE-2019-10953

ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. Researchers have found some controllers are susceptible to a denial-of-service attack due to a flood of network packets...

Unitronics PCOM remote START/STOP/RESET command

Unitronics Vision PLCs allow remote administrative functions to control the PLC using authenticated PCOM commands. This module supports START, STOP and RESET operations. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework...

Mitsubishi Electric MELSEC-Q Series PLCs

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Mitsubishi Electric Equipment: MELSEC-Q series PLCs Vulnerability: Resource Exhaustion 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a remote attacker to send...

Unitronics PCOM Client

Unitronics Vision PLCs allow unauthenticated PCOM commands to query PLC registers. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Unitronics PCOM Client', 'Description' = %q Unitronics Vision...

CVE-2018-7812

An Information Exposure through Discrepancy vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where the web server sends different responses in a way that exposes security-relevant information about the state of the product, such as whether...

CVE-2018-7833

An Improper Check for Unusual or Exceptional Conditions vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where an unauthenticated user can send a specially crafted XML data via a POST request to cause the web server to become unavailable...