EVlink City < R8 V3.4.0.1 - Authentication Bypass

A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1, EVlink Parking EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1, and EVlink Smart Wallbox EVB1A all versions prior to R8 V3.4.0.1 that could allow an attacker t...

Schneider Electric U.motion Builder - Remote Code Execution

U.motion Builder 1.3.4 contains a remote code execution vulnerability caused by improper input sanitization, allowing attackers to execute arbitrary system commands through crafted input parameters. id: CVE-2018-7841 info: name: Schneider Electric U.motion Builder - Remote Code Execution author:...

Schneider Electric U.motion Builder - SQL Injection

The vulnerability exists within processing of trackimportexport.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the objectid input parameter. id: CVE-2018-7765 info: name: Schneider Electric U.motion...

CVE-2018-7843

CVE-2018-7843 Затронутые продукты Schneider Electric Modicon M580 Версия 2.80 Schneider Electric Modicon M340 Версия 3.10 Schneider Electric Modicon Premium Версия 3.20 Schneider Electric Modicon Quantum Версия 3.60 Ссылки https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2018-7854

CVE-2018-7854 Produits concernés Schneider Electric Modicon M580 Version 2.90 Schneider Electric Modicon M340 Version 3.10 Références https://www.se.com/ww/en/download/document/SEVD-2019-134-11/ https://www.talosintelligence.com/vulnerabilityreports/TALOS-2019-0765 Utilisation root@kitploit: pyth...

CVE-2018-7844

CVE-2018-7844 Produits concernés Schneider Electric Modicon M580 Toutes les versions Schneider Electric Modicon M340 Toutes les versions Schneider Electric Modicon Premium Toutes les versions Schneider Electric Modicon Quantum Toutes les versions Références...

apxutil

Uma ferramenta para manipular arquivos de archive de CLP Schneider Electric Esta ferramenta pode extrair e remontar arquivos de "archive" de CLPs, usados por vários CLPs Schneider Electric, incluindo pelo menos M580, M340 e Quantum. Os arquivos de archive com extensão .sta são na verdade um arqui...

CVE-2018-7849

CVE-2018-7849 Produtos Afetados Schneider Electric Modicon M580 Versão 2.90 Schneider Electric Modicon M340 Versão 3.10 Schneider Electric Modicon Premium Todas as Versões Schneider Electric Modicon Quantum Todas as Versões Referências https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2018-7846

CVE-2018-7846 Produtos Afetados Schneider Electric Modicon M580 Versão 2.90 Schneider Electric Modicon M340 Versão 3.10 Schneider Electric Modicon Premium Todas as Versões Schneider Electric Modicon Quantum Todas as Versões Referências https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2018-7852

CVE-2018-7852 Затронутые продукты Schneider Electric Modicon M580 Версия 2.80 Schneider Electric Modicon M340 Версия 3.01 Schneider Electric Modicon Premium Версия 3.20 Schneider Electric Modicon Quantum Версия 3.60 Ссылки https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2018-7848

CVE-2018-7848 受影响产品 施耐德电气 Modicon M580 版本 2.90 施耐德电气 Modicon M340 版本 3.10 施耐德电气 Modicon Premium 所有版本 施耐德电气 Modicon Quantum 所有版本 参考 https://www.se.com/ww/en/download/document/SEVD-2019-134-11/ https://www.talosintelligence.com/vulnerabilityreports/TALOS-2018-0740 使用方法 root@kitploit: python...

CVE-2018-7845

CVE-2018-7845 प्रभावित उत्पाद Schneider Electric Modicon M580 संस्करण 2.80 Schneider Electric Modicon M340 संस्करण 3.01 Schneider Electric Modicon Premium संस्करण 3.20 Schneider Electric Modicon Quantum संस्करण 3.60 संदर्भ https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2018-7842

CVE-2018-7842 Затронутые продукты Schneider Electric Modicon M580 Версия 2.90 Schneider Electric Modicon M340 Версия 3.10 Schneider Electric Modicon Premium Все версии Schneider Electric Modicon Quantum Все версии Ссылки https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

ICSSecurityScripts

ICSSecurityScripts Script di sicurezza industriale Beckhoff-CX9020-WebControl.py: Controllo del PLC Beckhoff CX9020 Windows CE FullBeckhoffScan.py: Script elaborato per la scansione E l'hacking dei PLC Beckhoff PhoenixControlPLC-ILC150.py: Stampa lo stato della CPU e lo ripristina, testato e...

SpaceLogic C-Bus Home Controller <=1.31.460 - Remote Command Execution

SpaceLogic C-Bus Home Controller through 1.31.460 is susceptible to remote command execution via improper neutralization of special elements. Remote root exploit can be enabled when the command is compromised, and an attacker can potentially execute malware, obtain sensitive information, modify...

isf

Industrial Exploitation Framework ISFIndustrial Exploitation Framework is a exploitation framework based on Python, it's similar to metasploit framework. ISF is based on open source project routersploit. Read this in other languages:English, 简体中文, Disclaimer Usage of ISF for attacking targets...

Schneider Electric EcoStruxure Panel Server Initialization of a Resource with an Insecure Default (CVE-2026-6866)

CWE-1188 Initialization of a Resource with an Insecure Default vulnerability exists that could cause unauthorized disclosure of sensitive information when credentials revert to initial settings in rare circumstances, enabling unauthorized authentication using known credentials. This plugin only...

Schneider Electric Modicon Controllers M241, M251, M258, and LMC058 Improper Neutralization of Input During Web Page Generation (CVE-2025-13902)

CWE-79 Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists that could cause condition where authenticated attackers can have a victim's browser run arbitrary JavaScript when the victim hovers over a maliciously crafted element on a web server...

The vulnerability of Schneider Electric’s Cybersecurity Admin Expert (CAE) software, a security management tool, stems from insufficient protection for registration data. This vulnerability allows attackers to enhance their privileges.

The vulnerability of Schneider Electric’s Security Management Software, EcoStruxure Cybersecurity Admin Expert CAE, is related to insufficient protection for registration data. Exploiting this vulnerability can allow attackers to enhance their privileges...

PT-2026-60889

Name of the Vulnerable Software and Affected Versions Schneider Electric EcoStruxure Cybersecurity Admin Expert affected versions not specified Description Insufficient protection of stored credentials within the application allows a local privileged attacker to bypass authentication and perform...