CVSS: 6.5EPSS: 0%CPEs: 49EXPL: 0CVE-2021-22791
https://notcve.org/view.php?id=CVE-2021-22791
02 Sep 2021 — A CWE-787: Out-of-bounds Write vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU (part numbers BMEP* and BMEH*, all versions), Modicon M340 CPU (part numbers BMXP34*, all versions), Modicon MC80 (part numbers BMKC80*, all versions), Modicon Momentum Ethernet CPU (part numbers 171CBU*, all versions), PLC Simulator for EcoStruxureª Control Expert, including all U... • https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-222-04 • CWE-787: Out-of-bounds Write •
CVSS: 6.5EPSS: 0%CPEs: 49EXPL: 0CVE-2021-22790
https://notcve.org/view.php?id=CVE-2021-22790
02 Sep 2021 — A CWE-125: Out-of-bounds Read vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU (part numbers BMEP* and BMEH*, all versions), Modicon M340 CPU (part numbers BMXP34*, all versions), Modicon MC80 (part numbers BMKC80*, all versions), Modicon Momentum Ethernet CPU (part numbers 171CBU*, all versions), PLC Simulator for EcoStruxureª Control Expert, including all Un... • https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-222-04 • CWE-125: Out-of-bounds Read •
CVSS: 6.5EPSS: 0%CPEs: 49EXPL: 0CVE-2021-22789
https://notcve.org/view.php?id=CVE-2021-22789
02 Sep 2021 — A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU (part numbers BMEP* and BMEH*, all versions), Modicon M340 CPU (part numbers BMXP34*, all versions), Modicon MC80 (part numbers BMKC80*, all versions), Modicon Momentum Ethernet CPU (part numbers 171CBU*, all versions), PLC Simula... • https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-222-04 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.1EPSS: 0%CPEs: 63EXPL: 0CVE-2021-22779
https://notcve.org/view.php?id=CVE-2021-22779
14 Jul 2021 — Authentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Control Expert V15.0 SP1, EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), SCADAPack RemoteConnect for x70 (all versions), Modicon M580 CPU (all versions - part numbers BMEP* and BMEH*), Modicon M340 CPU (all versions - part numbers BMXP34*), that could cause unauthorized access in read and write m... • http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01 • CWE-290: Authentication Bypass by Spoofing •
CVSS: 5.3EPSS: 0%CPEs: 38EXPL: 0CVE-2020-7549
https://notcve.org/view.php?id=CVE-2020-7549
11 Dec 2020 — A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause denial of HTTP and FTP services when a series of specially crafted requests is sent to the controller over HTTP. Una CWE-754: Se presenta una vulnerabilidad de Comprobación Inapropiada de Condiciones Inusuales o Excepcionales en el Servi... • https://www.se.com/ww/en/download/document/SEVD-2020-343-06 • CWE-754: Improper Check for Unusual or Exceptional Conditions •
CVSS: 7.5EPSS: 0%CPEs: 32EXPL: 0CVE-2020-7543
https://notcve.org/view.php?id=CVE-2020-7543
11 Dec 2020 — A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions), that could cause denial of service when a specially crafted Read Physical Memory request over Modbus is sent to the controller. Una CWE-754: Se presenta una vulnerabilidad de Comprobación Inapropiada de Condiciones Inusuales o Excepcionales en Modicon M580, Modicon M340, Legacy Controllers ... • https://www.se.com/ww/en/download/document/SEVD-2020-343-08 • CWE-754: Improper Check for Unusual or Exceptional Conditions •
CVSS: 7.5EPSS: 0%CPEs: 40EXPL: 0CVE-2020-7542
https://notcve.org/view.php?id=CVE-2020-7542
11 Dec 2020 — A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions), that could cause denial of service when a specially crafted Read Physical Memory request over Modbus is sent to the controller. Una CWE-754: Se presenta una vulnerabilidad de Comprobación Inapropiada de Condiciones Inusuales o Excepcionales en Modicon M580, Modicon M340, Legacy Controllers ... • https://www.se.com/ww/en/download/document/SEVD-2020-343-08 • CWE-754: Improper Check for Unusual or Exceptional Conditions •
CVSS: 5.3EPSS: 0%CPEs: 40EXPL: 0CVE-2020-7541
https://notcve.org/view.php?id=CVE-2020-7541
11 Dec 2020 — A CWE-425: Direct Request ('Forced Browsing') vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause disclosure of sensitive data when sending a specially crafted request to the controller over HTTP. Una CWE-425: Se presenta una vulnerabilidad Petición Directa ("Forced Browsing") en el Servidor Web en Modicon M340, Legacy Offers Modicon Quantum y Modicon... • https://www.se.com/ww/en/download/document/SEVD-2020-343-03 • CWE-425: Direct Request ('Forced Browsing') •
CVSS: 9.8EPSS: 0%CPEs: 46EXPL: 0CVE-2020-7540
https://notcve.org/view.php?id=CVE-2020-7540
11 Dec 2020 — A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause unauthenticated command execution in the controller when sending special HTTP requests. Una CWE-306: Se presenta una vulnerabilidad de Falta Autenticación para la Función Crítica en el Servidor Web en Modicon M340, Legacy Offers Modicon Quantum ... • https://www.se.com/ww/en/download/document/SEVD-2020-343-04 • CWE-306: Missing Authentication for Critical Function •
CVSS: 7.5EPSS: 0%CPEs: 40EXPL: 0CVE-2020-7539
https://notcve.org/view.php?id=CVE-2020-7539
11 Dec 2020 — A CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause a denial of service vulnerability when a specially crafted packet is sent to the controller over HTTP. Una CWE-754: Se presenta una vulnerabilidad de Comprobación Inapropiada de Condiciones Inusuales o Excepcionales en el Servidor Web en ... • https://www.se.com/ww/en/download/document/SEVD-2020-343-03 • CWE-754: Improper Check for Unusual or Exceptional Conditions •