Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

schneider-electric modicon quantum firmware vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2019-6851
A CWE-538: File and Directory Information Exposure vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (all firmware versions), which could cause the disclosure of information from the controller when using TFTP protocol.
Schneider-electric Modicon M580 FirmwareSchneider-electric Modicon M340 FirmwareSchneider-electric Tsxmcpc002m FirmwareSchneider-electric Tsxmcpc512k FirmwareSchneider-electric Tsxmfpp001m FirmwareSchneider-electric Tsxmfpp002m FirmwareSchneider-electric Tsxmfpp004m FirmwareSchneider-electric Tsxmfpp512k FirmwareSchneider-electric Tsxmrpc001m FirmwareSchneider-electric Tsxmrpc002m FirmwareSchneider-electric Tsxmrpc003m FirmwareSchneider-electric Tsxmrpc007m FirmwareSchneider-electric Tsxmrpc01m7 FirmwareSchneider-electric Tsxmrpc768k FirmwareSchneider-electric Tsxmrpf004m FirmwareSchneider-electric Tsxmrpf008m FirmwareSchneider-electric Tsxmfp0128p2 FirmwareSchneider-electric Tsxmfp064p2 FirmwareSchneider-electric Tsxmfpp224k FirmwareSchneider-electric Tsxmfpp384k FirmwareSchneider-electric Tsxmrpc448k FirmwareSchneider-electric Tsxmrpp224k Firmware
5
CVSSv2
CVE-2019-6845
A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (all firmware versions), which could cause the disclosure of information when transferring applications to the controller using Modbus ...
Schneider-electric Modicon M580 FirmwareSchneider-electric Modicon M340 FirmwareSchneider-electric Tsxmcpc002m FirmwareSchneider-electric Tsxmcpc512k FirmwareSchneider-electric Tsxmfpp001m FirmwareSchneider-electric Tsxmfpp002m FirmwareSchneider-electric Tsxmfpp004m FirmwareSchneider-electric Tsxmfpp512k FirmwareSchneider-electric Tsxmrpc001m FirmwareSchneider-electric Tsxmrpc002m FirmwareSchneider-electric Tsxmrpc003m FirmwareSchneider-electric Tsxmrpc007m FirmwareSchneider-electric Tsxmrpc01m7 FirmwareSchneider-electric Tsxmrpc768k FirmwareSchneider-electric Tsxmrpf004m FirmwareSchneider-electric Tsxmrpf008m FirmwareSchneider-electric Tsxmfp0128p2 FirmwareSchneider-electric Tsxmfp064p2 FirmwareSchneider-electric Tsxmfpp224k FirmwareSchneider-electric Tsxmfpp384k FirmwareSchneider-electric Tsxmrpc448k FirmwareSchneider-electric Tsxmrpp224k Firmware
6.4
CVSSv2
CVE-2019-6821
CWE-330: Use of Insufficiently Random Values vulnerability, which could cause the hijacking of the TCP connection when using Ethernet communication in Modicon M580 firmware versions prior to V2.30, and all firmware versions of Modicon M340, Modicon Premium, Modicon Quantum.
Schneider-electric Modicon M580 FirmwareSchneider-electric Modicon M340 FirmwareSchneider-electric Modicon Quantum FirmwareSchneider-electric Modicon Premium Firmware
7.8
CVSSv2
CVE-2019-6809
A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware versions prior to V2.90), Modicon M340 (firmware versions prior to V3.10), Modicon Premium (all versions), Modicon Quantum (all versions), which could cause a possible denial of service when reading inva...
Schneider-electric Modicon M580 FirmwareSchneider-electric Modicon M340 FirmwareSchneider-electric Modicon Premium FirmwareSchneider-electric Modicon Quantum Firmware
5
CVSSv2
CVE-2019-6819
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists which could cause a possible Denial of Service when specific Modbus frames are sent to the controller in the products: Modicon M340 - firmware versions prior to V3.01, Modicon M580 - firmware ver...
Schneider-electric Modicon M340 FirmwareSchneider-electric Modicon M580 FirmwareSchneider-electric Modicon Quantum FirmwareSchneider-electric Modicon Premium Firmware
7.8
CVSSv2
CVE-2019-6828
A CWE-248: Uncaught Exception vulnerability exists Modicon M580 (firmware version prior to V2.90), Modicon M340 (firmware version prior to V3.10), Modicon Premium (all versions), and Modicon Quantum (all versions), which could cause a possible denial of service when reading speci...
Schneider-electric Modicon M580 FirmwareSchneider-electric Modicon M340 FirmwareSchneider-electric Modicon Premium FirmwareSchneider-electric Modicon Quantum Firmware
6.5
CVSSv2
CVE-2018-7240
A vulnerability exists in Schneider Electric's Modicon Quantum in all versions of the communication modules which could allow arbitrary code execution. An FTP command used to upgrade the firmware of the module can be misused to cause a denial of service, or in extreme cases,...
Schneider-electric 140cpu65150 Firmware -Schneider-electric 140cpu31110 Firmware -Schneider-electric 140cpu43412u Firmware -Schneider-electric 140cpu65160 Firmware -Schneider-electric 140cpu65260 Firmware -Schneider-electric 140cpu65860 Firmware -Schneider-electric 140cpu65160s Firmware -Schneider-electric 140cpu65150c Firmware -Schneider-electric 140cpu31110c Firmware -Schneider-electric 140cpu43412uc Firmware -Schneider-electric 140cpu65160c Firmware -Schneider-electric 140cpu65260c Firmware -Schneider-electric 140cpu65860c Firmware -
6.4
CVSSv2
CVE-2019-6816
In Modicon Quantum all firmware versions, a CWE-94: Code Injection vulnerability could cause an unauthorized firmware modification with possible Denial of Service when using Modbus protocol.
Schneider-electric Modicon Quantum Firmware
4
CVSSv2
CVE-2018-7788
A CWE-255 Credentials Management vulnerability exists in Modicon Quantum with firmware versions prior to V2.40. which could cause a Denial Of Service when using a Telnet connection.
Schneider-electric Modicon Quantum Firmware
6.4
CVSSv2
CVE-2019-6815
In Modicon Quantum all firmware versions, CWE-264: Permissions, Privileges, and Access Control vulnerabilities could cause a denial of service or unauthorized modifications of the PLC configuration when using Ethernet/IP protocol.
Schneider-electric Modicon Quantum Firmware
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322CVE-2006-4304wirelessCVE-2023-23022local file inclusionCVE-2024-27058CVE-2024-33820open redirectCVE-2024-27079
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook