Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

schneider-electric somachine - vulnerabilities and exploits

(subscribe to this query)
5.2
CVSSv2
CVE-2020-28220
A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Modicon M258 Firmware (All versions prior to V5.0.4.11) and SoMachine/SoMachine Motion software (All versions), that could cause a buffer overflow when the length of a file ...
Schneider-electric Modicon M258 FirmwareSchneider-electric SomachineSchneider-electric Somachine Motion
7.5
CVSSv2
CVE-2020-7487
A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the malicious user to execute malicious code on the Modicon M218, M241, M251, and M258 controllers.
Schneider-electric Ecostruxure Machine ExpertSchneider-electric SomachineSchneider-electric Somachine MotionSchneider-electric Modicon M218 FirmwareSchneider-electric Modicon M241 FirmwareSchneider-electric Modicon M251 FirmwareSchneider-electric Modicon M258 Firmware
5
CVSSv2
CVE-2020-7488
A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists which could leak sensitive information transmitted between the software and the Modicon M218, M241, M251, and M258 controllers.
Schneider-electric Ecostruxure Machine ExpertSchneider-electric SomachineSchneider-electric Somachine MotionSchneider-electric Modicon M218 FirmwareSchneider-electric Modicon M241 FirmwareSchneider-electric Modicon M251 FirmwareSchneider-electric Modicon M258 Firmware
9.3
CVSSv2
CVE-2013-0662
Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 up to and including 3.2 allow remote malicious users to execute arbitrary code via a large buffer-size value in a Modbus Application Header.
Schneider-electric ConceptSchneider-electric Modbus Serial Driver 1.10Schneider-electric Modbus Serial Driver 2.2Schneider-electric Modbus Serial Driver 3.2Schneider-electric Modbuscommdtm SlSchneider-electric Opc Factory ServerSchneider-electric Opc Factory Server 3.34Schneider-electric Opc Factory Server 3.35Schneider-electric Pl7Schneider-electric PowersuiteSchneider-electric Sft2841 13.1Schneider-electric Sft2841Schneider-electric Somachine 2.0Schneider-electric Somachine 3.0Schneider-electric SomachineSchneider-electric SomoveSchneider-electric TwidosuiteSchneider-electric Unity Pro 6.0Schneider-electric Unity ProSchneider-electric UnityloaderSchneider Electric Somachine 3.0
2.1
CVSSv2
CVE-2018-7822
An Incorrect Default Permissions (CWE-276) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior to firmware V1.10.0.0) which could cause unauthorized access to SoMachine Basic resource files when logged on the system hosting S...
Schneider-electric Somachine BasicSchneider-electric Modicon M221 Firmware
5
CVSSv2
CVE-2018-7821
An Environment (CWE-2) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior to firmware V1.10.0.0) which could cause cycle time impact when flooding the M221 ethernet interface while the Ethernet/IP adapter is activated.
Schneider-electric Somachine BasicSchneider-electric Modicon M221 Firmware
5
CVSSv2
CVE-2018-7823
A Environment (CWE-2) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior to firmware V1.10.0.0) which could cause remote launch of SoMachine Basic when sending crafted ethernet message.
Schneider-electric Somachine BasicSchneider-electric Modicon M221 Firmware
7.5
CVSSv2
CVE-2014-9200
Stack-based buffer overflow in an unspecified DLL file in a DTM development kit in Schneider Electric Unity Pro, SoMachine, SoMove, SoMove Lite, Modbus Communication Library 2.2.6 and previous versions, CANopen Communication Library 1.0.2 and previous versions, EtherNet/IP Commun...
Schneider-electric Somove Lite -Schneider-electric Somove -Schneider-electric Unity Pro -Schneider-electric Somachine -
7.5
CVSSv2
CVE-2017-7574
Schneider Electric SoMachine Basic 1.4 SP1 and Schneider Electric Modicon TM221CE16R 1.3.3.3 devices have a hardcoded-key vulnerability. The Project Protection feature is used to prevent unauthorized users from opening an XML protected project file, by prompting the user for a pa...
Schneider-electric Modicon Tm221ce16r Firmware 1.3.3.3Schneider-electric Somachine 1.4
7.5
CVSSv2
CVE-2020-7489
A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability exists on EcoStruxure Machine Expert – Basic or SoMachine Basic programming software (versions in security notification). The result of this ...
Schneider-electric Ecostruxure Machine ExpertSchneider-electric Somachine BasicSchneider-electric Modicon M100 FirmwareSchneider-electric Modicon M200 FirmwareSchneider-electric Modicon M221 Firmware
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48693CVE-2024-30851CVE-2024-34460CVE-2024-2887localCVE-2024-27956remote code executionCVE-2024-34475privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook