Researchers Warn of Critical Security Bugs in Schneider Electric Modicon PLCs

🗓️ 16 Feb 2023 13:18:00Reported by The Hacker NewsType

Researchers Warn of Critical Security Bugs in Schneider Electric Modicon PLCs. New vulnerabilities allow authentication bypass and remote code execution, potentially enabling unauthorized code execution, denial-of-service, and disclosure of sensitive information

Reporter	Title	Published	Views	Family All 51
ATTACKERKB	CVE-2022-45788	30 Jan 202313:15	–	attackerkb
ATTACKERKB	CVE-2022-45789	31 Jan 202306:15	–	attackerkb
ATTACKERKB	CVE-2021-31886	9 Nov 202112:15	–	attackerkb
BDU FSTEC	The vulnerability of FTP servers for microprogrammed software controllers such as CAPITAL VSTAR, APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus allows a hacker to cause service failures or execute arbitrary codes.	20 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Schneider Electric’s programmable logic controllers’ microprogramming software lies in the insufficient testing of unusual or exceptional states. This allows a intruder to execute arbitrary code or cause malfunctions during maintenance.	20 Jan 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the EcoStruxure Process Expert automation system, related to bypassing the authentication process, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.	31 Jan 202300:00	–	bdu_fstec
Circl	CVE-2021-31886	10 Nov 202116:40	–	circl
Circl	CVE-2022-45788	30 Jan 202316:37	–	circl
Circl	CVE-2022-45789	31 Jan 202312:38	–	circl
CNNVD	Siemens Nucleus ReadyStart 缓冲区错误漏洞	9 Nov 202100:00	–	cnnvd