Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

schneider-electric modicon premium tsxety5103 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2013-0663
Cross-site request forgery (CSRF) vulnerability on the Schneider Electric Quantum 140NOE77111, 140NOE77101, and 140NWM10000; M340 BMXNOC0401, BMXNOE0100x, and BMXNOE011xx; and Premium TSXETY4103, TSXETY5103, and TSXWMY100 PLC modules allows remote malicious users to hijack the au...
Schneider-electric Modicon Quantum Plc 140noe77101Schneider-electric Modicon Quantum Plc 140nwm10000Schneider-electric Modicon Quantum Plc 140noe77111Schneider-electric Modicon M340 Bmxnoe0100xSchneider-electric Modicon M340 Bmxnoe011xxSchneider-electric Modicon M340 Bmxnoc0401Schneider-electric Modicon Premium Tsxety5103Schneider-electric Modicon Premium Tsxwmy100Schneider-electric Modicon Premium Tsxety4103
NA
CVE-2013-0664
The FactoryCast service on the Schneider Electric Quantum 140NOE77111 and 140NWM10000, M340 BMXNOE0110x, and Premium TSXETY5103 PLC modules allows remote authenticated users to send Modbus messages, and consequently execute arbitrary code, by embedding these messages in SOAP HTTP...
Schneider-electric Modicon Quantum Plc 140nwm10000Schneider-electric Modicon Quantum Plc 140noe77111Schneider-electric Modicon M340 Bmxnoe0110xSchneider-electric Modicon Premium Tsxety5103
7.5
CVSSv3
CVE-2021-22788
A CWE-787: Out-of-bounds Write vulnerability exists that could cause denial of service when an attacker sends a specially crafted HTTP request to the web server of the device. Affected Product: Modicon M340 CPUs: BMXP34 (Versions prior to V3.40), Modicon M340 X80 Ethernet Communi...
Schneider-electric Modicon M340 Bmxp342020 FirmwareSchneider-electric Bmxnoe0100 FirmwareSchneider-electric Bmxnoe0110 FirmwareSchneider-electric Bmxnoc0401 FirmwareSchneider-electric Bmxnor0200h Rtu FirmwareSchneider-electric Tsxp574634 FirmwareSchneider-electric Tsxp575634 FirmwareSchneider-electric Tsxp576634 FirmwareSchneider-electric 140cpu65150 FirmwareSchneider-electric 140noe771x1 FirmwareSchneider-electric 140noc78x00 FirmwareSchneider-electric 140noc77101 FirmwareSchneider-electric Tsxety4103 FirmwareSchneider-electric Tsxety5103 Firmware
7.5
CVSSv3
CVE-2021-22787
A CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of the device when an attacker sends a specially crafted HTTP request to the web server of the device. Affected Product: Modicon M340 CPUs: BMXP34 (Versions prior to V3.40), Modicon M340 X...
Schneider-electric Modicon M340 Bmxp342020 FirmwareSchneider-electric Bmxnoe0100 FirmwareSchneider-electric Bmxnoe0110 FirmwareSchneider-electric Bmxnoc0401 FirmwareSchneider-electric Bmxnor0200h Rtu FirmwareSchneider-electric Tsxp574634 FirmwareSchneider-electric Tsxp575634 FirmwareSchneider-electric Tsxp576634 FirmwareSchneider-electric 140cpu65150 FirmwareSchneider-electric 140noe771x1 FirmwareSchneider-electric 140noc78x00 FirmwareSchneider-electric 140noc77101 FirmwareSchneider-electric Tsxety4103 FirmwareSchneider-electric Tsxety5103 Firmware
7.5
CVSSv3
CVE-2021-22785
A CWE-200: Information Exposure vulnerability exists that could cause sensitive information of files located in the web root directory to leak when an attacker sends a HTTP request to the web server of the device. Affected Product: Modicon M340 CPUs: BMXP34 (Versions prior to V3....
Schneider-electric Modicon M340 Bmxp342020 FirmwareSchneider-electric Bmxnoe0100 FirmwareSchneider-electric Bmxnoe0110 FirmwareSchneider-electric Bmxnoc0401 FirmwareSchneider-electric Bmxnor0200h Rtu FirmwareSchneider-electric Tsxp574634 FirmwareSchneider-electric Tsxp575634 FirmwareSchneider-electric Tsxp576634 FirmwareSchneider-electric 140cpu65150 FirmwareSchneider-electric 140noe771x1 FirmwareSchneider-electric 140noc78x00 FirmwareSchneider-electric 140noc77101 FirmwareSchneider-electric Tsxety4103 FirmwareSchneider-electric Tsxety5103 Firmware
8.8
CVSSv3
CVE-2020-7534
A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists on the web server used, that could cause a leak of sensitive data or unauthorized actions on the web server during the time the user is logged in. Affected Products: Modicon M340 CPUs: BMXP34 (All Versions), Modico...
Schneider-electric Modicon M340 Bmxp342020 FirmwareSchneider-electric 140cpu65 FirmwareSchneider-electric Tsxp57 FirmwareSchneider-electric Bmxnoc0401 FirmwareSchneider-electric Bmxnoe01 FirmwareSchneider-electric Bmxnor0200h FirmwareSchneider-electric 140noe77111 FirmwareSchneider-electric 140noc78000 FirmwareSchneider-electric Tsxety5103 FirmwareSchneider-electric Tsxety4103 Firmware
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
client sideCVE-2023-31889template injectionCVE-2024-4304CVE-2006-4304CVE-2024-33272type confusionCVE-2024-21345CVE-2024-33271
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook