NotCVE - vendor:"Schneider-electric" product:"Modicon M340 Bmxp3420302cl Firmware" version:"

9 results (0.004 seconds)

CVSS: 5.3EPSS: 0%CPEs: 38EXPL: 0

CVE-2020-7549

https://notcve.org/view.php?id=CVE-2020-7549

11 Dec 2020 — A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause denial of HTTP and FTP services when a series of specially crafted requests is sent to the controller over HTTP. Una CWE-754: Se presenta una vulnerabilidad de Comprobación Inapropiada de Condiciones Inusuales o Excepcionales en el Servi... • https://www.se.com/ww/en/download/document/SEVD-2020-343-06 • CWE-754: Improper Check for Unusual or Exceptional Conditions •

CVSS: 7.5EPSS: 0%CPEs: 32EXPL: 0

CVE-2020-7543

https://notcve.org/view.php?id=CVE-2020-7543

11 Dec 2020 — A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions), that could cause denial of service when a specially crafted Read Physical Memory request over Modbus is sent to the controller. Una CWE-754: Se presenta una vulnerabilidad de Comprobación Inapropiada de Condiciones Inusuales o Excepcionales en Modicon M580, Modicon M340, Legacy Controllers ... • https://www.se.com/ww/en/download/document/SEVD-2020-343-08 • CWE-754: Improper Check for Unusual or Exceptional Conditions •

CVSS: 7.5EPSS: 0%CPEs: 40EXPL: 0

CVE-2020-7542

https://notcve.org/view.php?id=CVE-2020-7542

CVSS: 5.3EPSS: 0%CPEs: 40EXPL: 0

CVE-2020-7541

https://notcve.org/view.php?id=CVE-2020-7541

11 Dec 2020 — A CWE-425: Direct Request ('Forced Browsing') vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause disclosure of sensitive data when sending a specially crafted request to the controller over HTTP. Una CWE-425: Se presenta una vulnerabilidad Petición Directa ("Forced Browsing") en el Servidor Web en Modicon M340, Legacy Offers Modicon Quantum y Modicon... • https://www.se.com/ww/en/download/document/SEVD-2020-343-03 • CWE-425: Direct Request ('Forced Browsing') •

CVSS: 9.8EPSS: 0%CPEs: 46EXPL: 0

CVE-2020-7540

https://notcve.org/view.php?id=CVE-2020-7540

11 Dec 2020 — A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause unauthenticated command execution in the controller when sending special HTTP requests. Una CWE-306: Se presenta una vulnerabilidad de Falta Autenticación para la Función Crítica en el Servidor Web en Modicon M340, Legacy Offers Modicon Quantum ... • https://www.se.com/ww/en/download/document/SEVD-2020-343-04 • CWE-306: Missing Authentication for Critical Function •

CVSS: 7.5EPSS: 0%CPEs: 40EXPL: 0

CVE-2020-7539

https://notcve.org/view.php?id=CVE-2020-7539

11 Dec 2020 — A CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause a denial of service vulnerability when a specially crafted packet is sent to the controller over HTTP. Una CWE-754: Se presenta una vulnerabilidad de Comprobación Inapropiada de Condiciones Inusuales o Excepcionales en el Servidor Web en ... • https://www.se.com/ww/en/download/document/SEVD-2020-343-03 • CWE-754: Improper Check for Unusual or Exceptional Conditions •

CVSS: 7.5EPSS: 0%CPEs: 38EXPL: 0

CVE-2020-7537

https://notcve.org/view.php?id=CVE-2020-7537

CVSS: 7.5EPSS: 0%CPEs: 42EXPL: 0

CVE-2020-7535

https://notcve.org/view.php?id=CVE-2020-7535

11 Dec 2020 — A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal' Vulnerability Type) vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause disclosure of information when sending a specially crafted request to the controller over HTTP. Una CWE-22: Se presenta una vulnerabilidad de Limitación Inapropiada de un Nombre de Ruta a un Di... • https://www.se.com/ww/en/download/document/SEVD-2020-343-05 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •

CVSS: 7.8EPSS: 0%CPEs: 20EXPL: 0

CVE-2020-7536

https://notcve.org/view.php?id=CVE-2020-7536

11 Dec 2020 — A CWE-754:Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M340 CPUs (BMXP34* versions prior to V3.30) Modicon M340 Communication Ethernet modules (BMXNOE0100 (H) versions prior to V3.4 BMXNOE0110 (H) versions prior to V6.6 BMXNOR0200H all versions), that could cause the device to be unreachable when modifying network parameters over SNMP. Una CWE-754: Se presenta una vulnerabilidad de Comprobación Inapropiada de Condiciones Inusuales o Excepcionales en Modicon M340 CPUs ... • https://security.cse.iitk.ac.in/responsible-disclosure • CWE-754: Improper Check for Unusual or Exceptional Conditions •