Schneider-electric

Modicon Quantum Firmware

25 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2018-7846

Exploit
  • EPSS 43.32%
  • Veröffentlicht 22.05.2019 20:29:01
  • Zuletzt bearbeitet 21.11.2024 04:12:52

A CWE-501: Trust Boundary Violation vulnerability on connection to the Controller exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and Modicon Premium which could cause unauthorized access by conducting a brute force attack o...

7.5

CVE-2018-7845

Exploit
  • EPSS 3.75%
  • Veröffentlicht 22.05.2019 20:29:01
  • Zuletzt bearbeitet 21.11.2024 04:12:52

A CWE-125: Out-of-bounds Read vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of unexpected data from the controller when reading specific memory blocks in ...

7.5

CVE-2018-7843

Exploit
  • EPSS 12.92%
  • Veröffentlicht 22.05.2019 20:29:01
  • Zuletzt bearbeitet 21.11.2024 04:12:51

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when reading memory blocks with an invalid data size or with an invalid dat...

9.8

CVE-2018-7842

Exploit
  • EPSS 8.17%
  • Veröffentlicht 22.05.2019 20:29:01
  • Zuletzt bearbeitet 21.11.2024 04:12:51

A CWE-290: Authentication Bypass by Spoofing vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause an elevation of privilege by conducting a brute force attack on Modbus paramet...

6.5

CVE-2018-7788

  • EPSS 0.42%
  • Veröffentlicht 22.05.2019 20:29:00
  • Zuletzt bearbeitet 21.11.2024 04:12:44

A CWE-255 Credentials Management vulnerability exists in Modicon Quantum with firmware versions prior to V2.40. which could cause a Denial Of Service when using a Telnet connection.