CVE-2020-6081

An exploitable code execution vulnerability exists in the PLCTask functionality of 3S-Smart Software Solutions GmbH CODESYS Runtime 3.5.14.30. A specially crafted network request can cause remote code execution. An attacker can send a malicious packet to trigger this vulnerability...

3S-Smart Software Solutions CODESYS Runtime Remote Code Execution Vulnerability

3S-Smart Software Solutions CODESYS Runtime is a controller real-time runtime system based on IEC61131-3 standard programming from 3S-Smart Software Solutions, Germany. The system transforms any embedded or PC-based device into an IEC61131-3 compliant industrial controller. A security vulnerabili...

Denial of Service Vulnerability in GX Works2 (CNVD-2020-32342)

GX Works2 is a PLC programming software. A denial of service vulnerability exists in GX Works2. An attacker could cause a denial of service by sending constructed malicious packets that cause it to experience an illegal memory access resulting in a denial of service, or could potentially execute...

Denial of Service Vulnerability in GX Works2 (CNVD-2020-28228)

GX Works2 is a PLC programming software. GX Works2 suffers from a denial of service vulnerability that can be exploited by an attacker to cause a denial of service...

Command Execution Vulnerability in WideField3

WideField3 is a PLC programming software developed by Yokogawa Electric Group. A command execution vulnerability exists in WideField3, which can be exploited by an attacker to execute malicious code...

Multiple Schneider Electric Products Data Forgery Issue Vulnerabilities

Schneider Electric Modicon M218 Logic Controller, etc. are a programmable logic controller from Schneider Electric France. A data forgery vulnerability exists in multiple Schneider Electric products, which can be exploited by attackers to execute malicious code...

Unspecified Vulnerability in Multiple Schneider Electric Products (CNVD-2021-25704)

Schneider Electric Modicon M218 Logic Controller, etc. are a programmable logic controller from Schneider Electric France. A security vulnerability exists in a number of Schneider Electric products, which arises from a program that transmits sensitive information in clear text and can be exploite...

WAGO PFC100 Resource Management Error Vulnerability

The WAGO PFC100 is a programmable logic controller PLC from WAGO Germany. A source management error vulnerability exists in the WAGO PFC100 funding, which can be exploited by an attacker to cause a denial of service...

WAGO PFC 200 Operating System Command Injection Vulnerability

The WAGO PFC 200 is a programmable logic controller PLC from the German company WAGO. An operating system command injection vulnerability exists in the cloud connectivity feature of the WAGO PFC 200 using firmware versions 03.02.0214, 03.01.0713, and 03.00.3912. The vulnerability stems from a...

Multiple Siemens Products Resource Consumption Vulnerability

Siemens SIMATIC S7-300 CPUs etc. are products of Siemens, Germany.SIMATIC S7-300 CPUs is a CPU Central Processing Unit module.Siemens SIMATIC S7-1200 is a PLC Programmable Logic Controller of the S7-1200 series. Siemens SIMATIC S7-400 is a programmable logic controller for manufacturing and proce...

Buffer Overflow Vulnerability in WECON PLC Editor

WECON PLC Editor is a programming software for Programmable Logic Controllers PLC from WECON Technologies, China. A buffer overflow vulnerability exists in WECON PLC Editor, which can be exploited by an attacker to cause a denial of service or code execution with the privileges of the application...

Denial of service vulnerability in schneider M580 (CNVD-2020-04562)

Schneider Electric SA is a global electrical company headquartered in France and a global specialist in energy efficiency management and automation. A denial of service vulnerability exists in the schneider M580, which can be exploited by an attacker to cause the loss of the PLC's internal...

CVE-2019-18236

Multiple buffer overflow vulnerabilities exist when the PLC Editor Version 1.3.520190129 processes project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application...

WAGO PFC 200 'I/O-Check' Buffer Overflow Vulnerability

The WAGO PFC 200 and WAGO PFC 100 are both programmable logic controllers PLCs from WAGO Germany. A buffer overflow vulnerability exists in the 'I/O-Check' function in the WAGO PFC 200 and PFC100. The vulnerability originates when a networked system or product performs an operation on memory...

WAGO PFC 200 Buffer Overflow Vulnerability

The WAGO PFC 200 is a programmable logic controller PLC from the German company WAGO. A buffer overflow vulnerability exists in the I/O-Check function in the WAGO PFC 200. The vulnerability originates when a networked system or product performs an operation on memory without properly validating...

WAGO PFC200 Buffer Overflow Vulnerability (CNVD-2019-46395)

The WAGO PFC200 is a programmable logic controller PLC from WAGO Germany. A buffer overflow vulnerability exists in the WAGO PFC200. The vulnerability originates when a networked system or product performs an operation on memory without properly validating data boundaries, resulting in incorrect...

Authentication Bypass Vulnerability in GE PLC IC695CPE330

The GE PLC IC695CPE330 is a General Electric programmable logic controller. The GE PLC IC695CPE330 suffers from an authentication bypass vulnerability that can be exploited by an attacker to bypass privilege validation and gain access to all WEB content...

SIEMENS S7-200 SIMATIC PLC suffers from a remote control vulnerability (CNVD-2019-37705)

S7-200 SMART is a small PLC developed by Siemens with a friendly interface and more user-friendly software operation. A remote control vulnerability exists in SIEMENS S7-200 SIMATIC PLC. An attacker can exploit the vulnerability to construct special application layer data messages that result in ...

SIEMENS S7-200 SIMATIC PLC has a remote control vulnerability

S7-200 SMART is a small PLC developed by Siemens with a friendly interface and more user-friendly software operation. A remote control vulnerability exists in SIEMENS S7-200 SIMATIC PLC, which can be exploited by attackers to remotely control the PLC...

Authentication Bypass Vulnerability in Unity Pro XL

Unity Pro XL is a PLC programming software from Schneider Electric. An authentication bypass vulnerability exists in Unity Pro XL, which can be exploited by an unauthorized attacker to gain access to the PLC...