The vulnerability of microprogrammed software in Schneider Electric Modicon programmable logic controllers, related to deficiencies in character elimination, allows a intruder to initiate the password change procedure for the authenticated user.

The vulnerability of the microprogrammed logic controllers from Schneider Electric Modicon relates to deficiencies in the elimination of special symbols. Exploiting this vulnerability can allow an intruder to initiate the password change process for the authenticated user...