Modicon M580/M340/Premium/Quantum Insufficient Random Value Usage Vulnerability

The Schneider Electric Modicon M580 is a programmable automation controller.The Schneider Electric Modicon Premium is a large programmable logic controller PLC for discrete or process applications.The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process...

Denial of Service Vulnerability in Multiple Schneider Electric Products (CNVD-2019-15891)

The Schneider Electric Modicon M580 is a programmable automation controller.The Schneider Electric Modicon Premium is a large programmable logic controller PLC for discrete or process applications.The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process...

CVE-2018-7849: Improper Handling of Exceptional Conditions

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and Modicon Premium which could cause a possible Denial of Service due to improper data integrity check when sending files the controller over Modbus...

CVE-2019-6819: Improper Check for Unusual or Exceptional Conditions

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists which could cause a possible Denial of Service when specific Modbus frames are sent to the controller in the products: Modicon M340 - firmware versions prior to V3.01, Modicon M580 - firmware versions prior to...

Schneider Electric Modicon Controllers

1. EXECUTIVE SUMMARY CVSS v3 5.4 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Schneider Electric Equipment: Modicon M580, Modicon M340, Modicon Premium, and Modicon Quantum Vulnerability: Use of Insufficiently Random Values 2. RISK EVALUATION Successful exploitation of this...

PT-2019-2276

Name of the Vulnerable Software and Affected Versions Modicon M580 affected versions not specified Modicon M340 affected versions not specified Modicon Quantum affected versions not specified Modicon Premium affected versions not specified Description A vulnerability exists that could cause the...

PT-2019-2340

Name of the Vulnerable Software and Affected Versions Modicon Quantum all firmware versions Description The issue is related to errors in access control mechanisms, which could allow a remote attacker to cause a denial of service or make unauthorized modifications to the PLC configuration when...

PT-2019-2339

Name of the Vulnerable Software and Affected Versions Modicon Quantum versions prior to V2.40 Description A Credentials Management issue exists, which could cause a Denial Of Service when using a Telnet connection. The vulnerability is related to errors in access parameter management and can be...

PT-2019-2341

Name of the Vulnerable Software and Affected Versions Modicon Quantum affected versions not specified Description The issue is related to errors in code generation management, specifically a code injection vulnerability. This could allow a remote attacker to unauthorizedly modify the embedded...

PT-2019-2279

Name of the Vulnerable Software and Affected Versions Modicon M580 affected versions not specified Modicon M340 affected versions not specified Modicon Quantum affected versions not specified Modicon Premium affected versions not specified Description The issue is related to an uncaught exception...

PT-2019-2271

Name of the Vulnerable Software and Affected Versions Modicon M580 affected versions not specified Modicon M340 affected versions not specified Modicon Quantum affected versions not specified Modicon Premium affected versions not specified Description A vulnerability exists that could cause an...

PT-2019-2273

Name of the Vulnerable Software and Affected Versions Modicon M580 affected versions not specified Modicon M340 affected versions not specified Modicon Quantum affected versions not specified Modicon Premium affected versions not specified Description A CWE-125: Out-of-bounds Read issue exists,...

PT-2019-2283

Name of the Vulnerable Software and Affected Versions Modicon M580 versions prior to V2.30 Modicon M340 affected versions not specified Modicon Premium affected versions not specified Modicon Quantum affected versions not specified Description The issue is related to the use of insufficiently...

PT-2019-2334

Name of the Vulnerable Software and Affected Versions Modicon M580 affected versions not specified Modicon M340 affected versions not specified Modicon Quantum affected versions not specified Modicon Premium affected versions not specified Description A vulnerability exists that could cause a...

PT-2019-2278

Name of the Vulnerable Software and Affected Versions Modicon M580 affected versions not specified Modicon M340 affected versions not specified Modicon Quantum affected versions not specified Modicon Premium affected versions not specified Description A reliance on untrusted inputs in a security...

PT-2019-2333

Name of the Vulnerable Software and Affected Versions Modicon M580 affected versions not specified Modicon M340 affected versions not specified Modicon Quantum affected versions not specified Modicon Premium affected versions not specified Description The issue is related to the disclosure of...

PT-2019-2281

Name of the Vulnerable Software and Affected Versions Modicon M580 versions prior to a fixed version Modicon M340 versions prior to a fixed version Modicon Quantum versions prior to a fixed version Modicon Premium versions prior to a fixed version Description The issue is related to an uncaught...

PT-2019-2280

Name of the Vulnerable Software and Affected Versions Modicon M580 affected versions not specified Modicon M340 affected versions not specified Modicon Quantum affected versions not specified Modicon Premium affected versions not specified Description A vulnerability exists in the software of the...

PT-2019-2275

Name of the Vulnerable Software and Affected Versions Modicon M580 versions affected versions not specified Modicon M340 versions affected versions not specified Modicon Quantum versions affected versions not specified Modicon Premium versions affected versions not specified Description The issue...

PT-2019-2277

Name of the Vulnerable Software and Affected Versions Modicon M580 versions affected versions not specified Modicon M340 versions affected versions not specified Modicon Quantum versions affected versions not specified Modicon Premium versions affected versions not specified Description The issue...