EVlink City < R8 V3.4.0.1 - Authentication Bypass

A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1, EVlink Parking EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1, and EVlink Smart Wallbox EVB1A all versions prior to R8 V3.4.0.1 that could allow an attacker t...

SpaceLogic C-Bus Home Controller <=1.31.460 - Remote Command Execution

SpaceLogic C-Bus Home Controller through 1.31.460 is susceptible to remote command execution via improper neutralization of special elements. Remote root exploit can be enabled when the command is compromised, and an attacker can potentially execute malware, obtain sensitive information, modify...

Schneider Electric U.motion Builder - SQL Injection

The vulnerability exists within processing of trackimportexport.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the objectid input parameter. id: CVE-2018-7765 info: name: Schneider Electric U.motion...

Schneider Electric U.motion Builder - Remote Code Execution

U.motion Builder 1.3.4 contains a remote code execution vulnerability caused by improper input sanitization, allowing attackers to execute arbitrary system commands through crafted input parameters. id: CVE-2018-7841 info: name: Schneider Electric U.motion Builder - Remote Code Execution author:...

apxutil

Schneider Electric PLCアーカイブファイルを操作するツール このツールは、Schneider...

ICSSecurityScripts

ICSSecurityScripts 工业安全脚本 Beckhoff-CX9020-WebControl.py: 控制 Beckhoff CX9020 Windows CE PLC FullBeckhoffScan.py: 用于扫描和攻击 Beckhoff PLC 的复杂脚本 PhoenixControlPLC-ILC150.py: 打印 CPU 状态并将其还原，已在 ILC150 上测试并正常工作（在其他型号上至少部分可工作） PhoenixControlPLC-ILC390.py: 打印 CPU 状态并将其还原，已在 ILC390 上测试并正常工作（在其他型号上至少部分可工作）...

CVE-2018-7848

CVE-2018-7848 影響を受ける製品 Schneider Electric Modicon M580 バージョン 2.90 Schneider Electric Modicon M340 バージョン 3.10 Schneider Electric Modicon Premium 全バージョン Schneider Electric Modicon Quantum 全バージョン 参考文献 https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2018-7845

CVE-2018-7845 受影响的产品 施耐德电气 Modicon M580 版本 2.80 施耐德电气 Modicon M340 版本 3.01 施耐德电气 Modicon Premium 版本 3.20 施耐德电气 Modicon Quantum 版本 3.60 参考文献 https://www.se.com/ww/en/download/document/SEVD-2019-134-11/ https://www.talosintelligence.com/vulnerabilityreports/TALOS-2018-0745 使用方法 root@kitploit: pytho...

CVE-2018-7842

CVE-2018-7842 影響を受ける製品 Schneider Electric Modicon M580 Version 2.90 Schneider Electric Modicon M340 Version 3.10 Schneider Electric Modicon Premium 全バージョン Schneider Electric Modicon Quantum 全バージョン 参考情報 https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2018-7849

CVE-2018-7849 受影响的产品 Schneider Electric Modicon M580 版本 2.90 Schneider Electric Modicon M340 版本 3.10 Schneider Electric Modicon Premium 所有版本 Schneider Electric Modicon Quantum 所有版本 参考链接 https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2018-7852

CVE-2018-7852 受影响的产品 施耐德电气 Modicon M580 版本 2.80 施耐德电气 Modicon M340 版本 3.01 施耐德电气 Modicon Premium 版本 3.20 施耐德电气 Modicon Quantum 版本 3.60 参考 https://www.se.com/ww/en/download/document/SEVD-2019-134-11/ https://www.talosintelligence.com/vulnerabilityreports/TALOS-2019-0763 用法 root@kitploit: python...

CVE-2018-7854

CVE-2018-7854 影響を受ける製品 Schneider Electric Modicon M580 Version 2.90 Schneider Electric Modicon M340 Version 3.10 参考文献 https://www.se.com/ww/en/download/document/SEVD-2019-134-11/ https://www.talosintelligence.com/vulnerabilityreports/TALOS-2019-0765 使用方法 root@kitploit: python CVE-2018-7854.py...

CVE-2018-7846

CVE-2018-7846 影響を受ける製品 Schneider Electric Modicon M580 バージョン 2.90 未満 Schneider Electric Modicon M340 バージョン 3.10 未満 Schneider Electric Modicon Premium 全バージョン Schneider Electric Modicon Quantum 全バージョン 参考文献 https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2018-7844

CVE-2018-7844 影響を受ける製品 Schneider Electric Modicon M580 全バージョン Schneider Electric Modicon M340 全バージョン Schneider Electric Modicon Premium 全バージョン Schneider Electric Modicon Quantum 全バージョン 参照 https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2018-7843

CVE-2018-7843 受影响产品 Schneider Electric Modicon M580 版本 2.80 Schneider Electric Modicon M340 版本 3.10 Schneider Electric Modicon Premium 版本 3.20 Schneider Electric Modicon Quantum 版本 3.60 参考链接 https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

isf

Industrial Exploitation Framework ISFIndustrial Exploitation Framework is a exploitation framework based on Python, it's similar to metasploit framework. ISF is based on open source project routersploit. Read this in other languages:English, 简体中文, Disclaimer Usage of ISF for attacking targets...

PT-2026-89045

News: Schneider Electric, Siemens, and Aveva ship ICS Patch Tuesday. Worst new hit: Modicon M580 auth CVE-2026-3869 CVSS 9.2. Siemens flags critical Reyrolle 7SR5, OIS, Industrial Edge bugs. OT owners: patch controllers now. https://t.co/TT7I5NW8Ee...

CVE-2026-77120

creationtimestamp| type| source ---|---|--- 2026-09-08 16:45:07+00:00| seen| https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-schneider-electric-15 2026-09-09 17:28:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/apgqf2kdfuep5...

CVE-2026-3869

creationtimestamp| type| source ---|---|--- 2026-09-08 16:45:02+00:00| seen| https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-schneider-electric-15 2026-09-09 13:45:25+00:00| seen| https://bsky.app/profile/hendryadrian.bsky.social/post/3mv3oc4sdrp2x 2026-09-11 17:20:09+00:00| seen|...

Schneider Electric EcoStruxure Panel Server Initialization of a Resource with an Insecure Default (CVE-2026-6866)

CWE-1188 Initialization of a Resource with an Insecure Default vulnerability exists that could cause unauthorized disclosure of sensitive information when credentials revert to initial settings in rare circumstances, enabling unauthorized authentication using known credentials. This plugin only...