CVSS: 4.9EPSS: 0%CPEs: 8EXPL: 0CVE-2019-6842
https://notcve.org/view.php?id=CVE-2019-6842
29 Oct 2019 — A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause a Denial of Service attack on the PLC when upgrading the firmware with a missing web server image inside the package using FTP protocol. Existe una vulnerabilidad CWE-755: Manejo inadecuado de condiciones excepcionales en los módulos Modicon M580, Modicon M340, Modicon BMxCRA y 140CRA (todas las versiones de firmware), que pod... • https://www.se.com/ww/en/download/document/SEVD-2019-281-02 • CWE-755: Improper Handling of Exceptional Conditions •
CVSS: 4.9EPSS: 0%CPEs: 8EXPL: 0CVE-2019-6841
https://notcve.org/view.php?id=CVE-2019-6841
29 Oct 2019 — A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 with firmware (version prior to V3.10), Modicon M340 (all firmware versions), and Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause a Denial of Service attack on the PLC when upgrading the firmware with no firmware image inside the package using FTP protocol. Existe una vulnerabilidad CWE-755: Manejo inadecuado de condiciones excepcionales en los módulos Modicon M580, Modicon M340, Modicon ... • https://www.se.com/ww/en/download/document/SEVD-2019-281-02 • CWE-755: Improper Handling of Exceptional Conditions •
CVSS: 7.8EPSS: 0%CPEs: 8EXPL: 0CVE-2019-6828
https://notcve.org/view.php?id=CVE-2019-6828
17 Sep 2019 — A CWE-248: Uncaught Exception vulnerability exists Modicon M580 (firmware version prior to V2.90), Modicon M340 (firmware version prior to V3.10), Modicon Premium (all versions), and Modicon Quantum (all versions), which could cause a possible denial of service when reading specific coils and registers in the controller over Modbus. Una CWE-248: Se presenta una vulnerabilidad de Excepción No Capturada en Modicon M580 (versión de firmware anterior a V2.90), Modicon M340 (versión de firmware anterior a V3.10)... • https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11 • CWE-248: Uncaught Exception CWE-755: Improper Handling of Exceptional Conditions •
CVSS: 7.8EPSS: 0%CPEs: 8EXPL: 0CVE-2019-6809
https://notcve.org/view.php?id=CVE-2019-6809
17 Sep 2019 — A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware versions prior to V2.90), Modicon M340 (firmware versions prior to V3.10), Modicon Premium (all versions), Modicon Quantum (all versions), which could cause a possible denial of service when reading invalid data from the controller. Una CWE-248: Se presenta una vulnerabilidad de Excepción No Capturada en Modicon M580 (versiones de firmware anteriores a V2.90), Modicon M340 (versiones de firmware anteriores a V3.10), Modicon Premium... • https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11 • CWE-248: Uncaught Exception CWE-755: Improper Handling of Exceptional Conditions •
CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0CVE-2019-6829
https://notcve.org/view.php?id=CVE-2019-6829
17 Sep 2019 — A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware version prior to V2.90) and Modicon M340 (firmware version prior to V3.10), which could cause a possible denial of service when writing to specific memory addresses in the controller over Modbus. Una CWE-248: Se presenta una vulnerabilidad de Excepción No Capturada en Modicon M580 (versión de firmware anterior a V2.90) y Modicon M340 (versión de firmware anterior a V3.10), lo que podría causar una posible denegación de servicio dur... • https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11 • CWE-248: Uncaught Exception CWE-755: Improper Handling of Exceptional Conditions •
CVSS: 7.1EPSS: 0%CPEs: 2EXPL: 0CVE-2019-6830
https://notcve.org/view.php?id=CVE-2019-6830
17 Sep 2019 — A CWE-248: Uncaught Exception vulnerability exists IN Modicon M580 all versions prior to V2.80, which could cause a possible denial of service when sending an appropriately timed HTTP request to the controller. Una CWE-248: Se presenta una vulnerabilidad Excepción No Capturada en Modicon M580 todas las versiones anteriores a V2.80, lo que podría causar una posible denegación de servicio cuando se envía una petición HTTP temporizada de manera apropiada al controlador. • https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11 • CWE-248: Uncaught Exception CWE-755: Improper Handling of Exceptional Conditions •
CVSS: 7.8EPSS: 0%CPEs: 36EXPL: 0CVE-2018-7838
https://notcve.org/view.php?id=CVE-2018-7838
15 Jul 2019 — A CWE-119 Buffer Errors vulnerability exists in Modicon M580 CPU - BMEP582040, all versions before V2.90, and Modicon Ethernet Module BMENOC0301, all versions before V2.16, which could cause denial of service on the FTP service of the controller or the Ethernet BMENOC module when it receives a FTP CWD command with a data length greater than 1020 bytes. A power cycle is then needed to reactivate the FTP service. Una CWE-119: Existe una vulnerabilidad de Errores de Búfer en la CPU M580 - BMEP582040 de Modicon... • https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-190-03 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 13%CPEs: 8EXPL: 2CVE-2018-7844
https://notcve.org/view.php?id=CVE-2018-7844
22 May 2019 — A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of SNMP information when reading memory blocks from the controller over Modbus. Una CWE-200: Existe una vulnerabilidad de Exposición de Información en todas las versiones de Modicon M580, Modicon M340, Modicon Quantum y Modicon Premium, lo que podría generar la divulgación de información SNMP cuando se leen bloques de memoria desde el c... • https://github.com/yanissec/CVE-2018-7844 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 9.8EPSS: 3%CPEs: 8EXPL: 1CVE-2019-6808
https://notcve.org/view.php?id=CVE-2019-6808
22 May 2019 — A CWE-284: Improper Access Control vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a remote code execution by overwriting configuration settings of the controller over Modbus. Una CWE-284: Vulnerabilidad de Control de Acceso inapropiado en todas las versiones de Modicon M580, Modicon M340, Modicon Quantum y Modicon Premium, podría generar una ejecución remota de código al sobrescribir en los ajustes de configuración del controlad... • https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11 • CWE-306: Missing Authentication for Critical Function •
CVSS: 7.5EPSS: 0%CPEs: 8EXPL: 1CVE-2019-6807
https://notcve.org/view.php?id=CVE-2019-6807
22 May 2019 — A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible denial of service when writing sensitive application variables to the controller over Modbus. Una CWE-248: Vulnerabilidad de Excepción no Detectada en todas las versiones de Modicon M580, Modicon M340, Modicon Quantum y Modicon Premium, que podría generar una posible Denegación de Servicio cuando se escriben variables de aplicación sensibles ... • https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11 • CWE-755: Improper Handling of Exceptional Conditions •