CVE-2018-7846

CVE-2018-7846 受影响产品 Schneider Electric Modicon M580 版本 2.90 Schneider Electric Modicon M340 版本 3.10 Schneider Electric Modicon Premium 所有版本 Schneider Electric Modicon Quantum 所有版本 参考 https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2018-7848

CVE-2018-7848 受影响产品 施耐德电气 Modicon M580 版本 2.90 施耐德电气 Modicon M340 版本 3.10 施耐德电气 Modicon Premium 所有版本 施耐德电气 Modicon Quantum 所有版本 参考 https://www.se.com/ww/en/download/document/SEVD-2019-134-11/ https://www.talosintelligence.com/vulnerabilityreports/TALOS-2018-0740 使用方法 python CVE-2018-7848.py --hos...

CVE-2018-7845

CVE-2018-7845 受影响的产品 施耐德电气 Modicon M580 版本 2.80 施耐德电气 Modicon M340 版本 3.01 施耐德电气 Modicon Premium 版本 3.20 施耐德电气 Modicon Quantum 版本 3.60 参考文献 https://www.se.com/ww/en/download/document/SEVD-2019-134-11/ https://www.talosintelligence.com/vulnerabilityreports/TALOS-2018-0745 使用方法 python...

CVE-2018-7849

CVE-2018-7849 受影响的产品 Schneider Electric Modicon M580 版本 2.90 Schneider Electric Modicon M340 版本 3.10 Schneider Electric Modicon Premium 所有版本 Schneider Electric Modicon Quantum 所有版本 参考链接 https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2018-7852

CVE-2018-7852 受影响的产品 施耐德电气 Modicon M580 版本 2.80 施耐德电气 Modicon M340 版本 3.01 施耐德电气 Modicon Premium 版本 3.20 施耐德电气 Modicon Quantum 版本 3.60 参考 https://www.se.com/ww/en/download/document/SEVD-2019-134-11/ https://www.talosintelligence.com/vulnerabilityreports/TALOS-2019-0763 用法 python CVE-2018-7852.py...

PT-2026-28858

Уязвимость микропрограммного обеспечения программируемых логических контроллеров Schneider Electric Modicon M241, Modicon M251 и Modicon M262 связана с некорректной зачисткой или освобождением ресурсов. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в...

PT-2026-28857

Уязвимость микропрограммного обеспечения программируемых логических контроллеров Schneider Electric Modicon M241, Modicon M251, Modicon M258 и Modicon LMC058 связана с непринятием мер по защите структуры веб-страницы. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно,...

CISA Releases Three Industrial Control Systems Advisories

CISA released three Industrial Control Systems ICS Advisories. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-301-01 Schneider Electric EcoStruxure ICSMA-25-301-01 Vertikal Systems Hospital Manager Backend Services...

EUVD-2018-19504

Malware in sbrugna...

CISA Releases Fourteen Industrial Control Systems Advisories

CISA released fourteen Industrial Control Systems ICS advisories on September 9, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-252-01 Rockwell Automation ThinManager ICSA-25-252-02 ABB Cylon Aspect BMS/BAS...

Schneider Electric Modicon M340 Controller and Communication Modules

GENERAL SECURITY RECOMMENDATIONS We strongly recommend the following industry cybersecurity best practices. Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. Install physical controls so no unauthorized personnel can access...

CISA Releases Eight Industrial Control Systems Advisories

CISA released eight Industrial Control Systems ICS advisories on June 24, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-175-01 Kaleris Navis N4 Terminal Operating System ICSA-25-175-02 Delta Electronics...

Schneider Electric Modicon Controllers 跨站脚本漏洞

Schneider Electric Modicon Controllers are a series of Modicon series programmable logic controllers from Schneider Electric, France. A cross-site scripting vulnerability exists in Schneider Electric Modicon Controllers that originates from improper input neutralization during web page generation...

Schneider Electric Modicon Controllers 资源管理错误漏洞

Schneider Electric Modicon Controllers are a series of Modicon series programmable logic controllers from Schneider Electric France. A resource management error vulnerability exists in Schneider Electric Modicon Controllers, which arises from uncontrolled resource consumption and can be exploited...

CISA Releases Seven Industrial Control Systems Advisories

CISA released seven Industrial Control Systems ICS advisories on April 24, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-114-01 Schneider Electric Modicon Controllers ICSA-25-114-02 ALBEDO Telecom Net.Time -...

CISA Releases Five Industrial Control Systems Advisories

CISA released five Industrial Control Systems ICS advisories on April 22, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-112-01 Siemens TeleControl Server Basic SQL ICSA-25-112-02 Siemens TeleControl Server...

CISA Releases Two Industrial Control Systems Advisories

CISA released two Industrial Control Systems ICS advisories on February 27, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-058-01 Schneider Electric Communication Modules for Modicon M580 and Quantum...

PT-2024-9322

Name of the Vulnerable Software and Affected Versions: Schneider Electric Modicon M241, M251, M258, LMC058 affected versions not specified Description: The issue is related to an Improper Input Validation vulnerability, which could lead to a denial of service and a loss of confidentiality,...

Schneider Electric Modicon M340, MC80, and Momentum Unity M1E Improper Input Validation (CVE-2024-8936)

An Input Validation vulnerability exists that could lead to loss of confidentiality of controller memory after a successful Man-In-The-Middle attack followed by sending a crafted Modbus function call used to tamper with memory. This plugin only works with Tenable.ot. Please visit...

The vulnerabilities of the microprogramming software for Schneider Electric Modicon M340 CPU BMXP34, M580 CPU BMEP, M580 CPU BMEH, M580 CPU Safety BMEP58*S, and M580 CPU Safety BMEH58*S, as well as the programming tools EcoStruxure Control Expert and EcoStruxure Process Expert, allow a attacker to execute a “man-in-the-middle” attack.

The vulnerability of microprogrammed logic controllers PLCs from Schneider Electric, such as the Modicon M340 CPU BMXP34, M580 CPU BMEP, M580 CPU BMEH, M580 CPU Safety BMEP58S, and M580 CPU Safety BMEH58S, as well as the PLC programming software EcoStruxure Control Expert and EcoStruxure Process...