Lucene search
+L

2164 matches found

Tenable Nessus
Tenable Nessus
added 2019/07/05 12:0 a.m.16 views

Schneider Electric Modicon Quantum 140NWM10000 Ethernet network TCP/IP module

Binary data 764536.prm...

7.3AI score
SaveExploits0
Hacker One
Hacker One
added 2019/06/26 7:5 a.m.46 views

Starbucks: Reflected cross-site scripting on multiple Starbucks assets.

NOTE! Thanks for submitting a report! Please replace all the square sections below with the pertinent details. Please indicate NA, if not applicable. Remember, the more detail you provide, the easier it is for us to verify and then potentially issue a bounty, so be sure to take your time filling...

SaveExploits0
BDU FSTEC
BDU FSTEC
added 2019/06/18 12:0 a.m.7 views

The vulnerability of the microprogrammed logic controller Modicon Quantum, related to errors in code generation, allows a intruder to unauthorizedly modify the built-in software and cause malfunctions during maintenance.

The vulnerability of the microprogrammed programmable logic controller Modicon Quantum is related to errors in code generation. Exploiting this vulnerability allows an intruder to unauthorizedly modify the built-in software and cause malfunctions using the Modbus protocol...

9.1CVSS7.8AI score0.0145EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/06/18 12:0 a.m.6 views

The vulnerability of the microprogrammed programmable logic controller Modicon Quantum, related to errors in controlling access parameters, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed programmable logic controller Modicon Quantum is related to errors in controlling access parameters. Exploiting this vulnerability could allow a malicious actor to cause malfunctions through the use of the Telnet connection...

6.5CVSS5.5AI score0.01135EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/06/18 12:0 a.m.11 views

The vulnerability of the microprogrammed programmable logic controller Modicon Quantum, related to errors in access control mechanisms, allows a intruder to trigger a service failure or alter the controller’s configuration.

The vulnerability of the microprogrammed programmable logic controller Modicon Quantum is related to errors in the access control mechanisms. Exploiting this vulnerability could allow an attacker to cause service failures or modify the controller’s configuration using the Ethernet/IP protocol...

9.1CVSS7.7AI score0.01399EPSS
SaveExploits0References3
CNVD
CNVD
added 2019/05/24 12:0 a.m.8 views

Buffer Overflow Vulnerability in Multiple Schneider Electric Products (CNVD-2019-45192)

The Schneider Electric Modicon M580 is a programmable automation controller.The Schneider Electric Modicon Premium is a large programmable logic controller PLC for discrete or process applications.The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process...

9.8CVSS7.5AI score0.29575EPSS
SaveExploits1References1
CNVD
CNVD
added 2019/05/23 12:0 a.m.44 views

Multiple Schneider Electric Products Input Validation Error Vulnerability

The Schneider Electric Modicon M580 is a programmable automation controller.The Schneider Electric Modicon Premium is a large programmable logic controller PLC for discrete or process applications.The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process...

5.3CVSS6.9AI score0.01509EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/05/23 12:0 a.m.10 views

Buffer Overflow Vulnerability in Multiple Schneider Electric Products (CNVD-2019-34829)

The Schneider Electric Modicon M580 is a programmable automation controller.The Schneider Electric Modicon Premium is a large programmable logic controller PLC for discrete or process applications.The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process...

7.5CVSS7.5AI score0.03413EPSS
SaveExploits1References1
CNVD
CNVD
added 2019/05/23 12:0 a.m.10 views

Multiple Schneider Electric Products Resource Management Error Vulnerability

The Schneider Electric Modicon M580 is a programmable automation controller.The Schneider Electric Modicon Premium is a large programmable logic controller PLC for discrete or process applications.The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process...

7.5CVSS6.8AI score0.03289EPSS
SaveExploits1References1
CNVD
CNVD
added 2019/05/23 12:0 a.m.10 views

Multiple Schneider Electric Products Privilege License and Access Control Issues Vulnerabilities

The Schneider Electric Modicon M580 is a programmable automation controller.The Schneider Electric Modicon Premium is a large programmable logic controller PLC for discrete or process applications.The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process...

9.8CVSS7AI score0.35039EPSS
SaveExploits1References1
CNVD
CNVD
added 2019/05/23 12:0 a.m.8 views

Access Control Error Vulnerability in Multiple Schneider Electric Products (CNVD-2019-34610)

The Schneider Electric Modicon M580 is a programmable automation controller.The Schneider Electric Modicon Premium is a large programmable logic controller PLC for discrete or process applications.The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process...

9.8CVSS7.5AI score0.03808EPSS
SaveExploits1References1
CNVD
CNVD
added 2019/05/23 12:0 a.m.9 views

Multiple Schneider Electric Products Information Disclosure Vulnerability (CNVD-2019-34828)

The Schneider Electric Modicon M580 is a programmable automation controller.The Schneider Electric Modicon Premium is a large programmable logic controller PLC for discrete or process applications.The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process...

7.5CVSS6.3AI score0.03413EPSS
SaveExploits1References1
Prion
Prion
added 2019/05/22 9:29 p.m.23 views

Information disclosure

A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of SNMP information when reading variables in the controller using Modbus...

5CVSS7.3AI score0.02298EPSS
SaveExploits1References2Affected Software2
Prion
Prion
added 2019/05/22 9:29 p.m.19 views

Design/Logic Flaw

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible Denial of Service when writing out of bounds variables to the controller over Modbus...

5CVSS7.3AI score0.01582EPSS
SaveExploits1References2Affected Software4
NVD
NVD
added 2019/05/22 9:29 p.m.29 views

CVE-2018-7853

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when reading invalid physical memory blocks in the controller over Modbus...

7.5CVSS7.3AI score0.01821EPSS
SaveExploits1References2
NVD
NVD
added 2019/05/22 9:29 p.m.28 views

CVE-2019-6806

A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of SNMP information when reading variables in the controller using Modbus...

7.5CVSS7.3AI score0.02298EPSS
SaveExploits1References2
OSV
OSV
added 2019/05/22 9:29 p.m.8 views

CVE-2018-7854

A CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a denial of Service when sending invalid debug parameters to the controller over Modbus...

7.5CVSS5.8AI score0.02304EPSS
SaveExploits1References2
OSV
OSV
added 2019/05/22 9:29 p.m.7 views

CVE-2018-7857

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible Denial of Service when writing out of bounds variables to the controller over Modbus...

7.5CVSS5.8AI score0.01582EPSS
SaveExploits1References2
OSV
OSV
added 2019/05/22 9:29 p.m.7 views

CVE-2019-6808

A CWE-284: Improper Access Control vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a remote code execution by overwriting configuration settings of the controller over Modbus...

9.8CVSS6.3AI score0.08161EPSS
SaveExploits1References2
Prion
Prion
added 2019/05/22 9:29 p.m.17 views

Design/Logic Flaw

A CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a Denial of Service when sending invalid breakpoint parameters to the controller over Modbus...

5CVSS7.3AI score0.02626EPSS
SaveExploits1References3Affected Software2
Rows per page
Query Builder