Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
quantum vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv3
CVE-2018-7276
An issue exists on Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) devices. Remote attackers can obtain potentially sensitive information via a /DbXmlInfo.xml request, as demonstrated by the Latitude/Longitude of the device.
Lutron Quantum Bacnet Integration Firmware 3.2.243
7.5
CVSSv3
CVE-2023-24025
CRYSTALS-DILITHIUM (in Post-Quantum Cryptography Selected Algorithms 2022) in PQClean d03da30 may allow universal forgeries of digital signatures via a template side-channel attack because of intermediate data leakage of one vector.
Pqclean Project Pqclean -
8.8
CVSSv3
CVE-2022-40623
The WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 does not utilize anti-CSRF tokens, which, when combined with other issues (such as CVE-2022-35518), can lead to remote, unauthenticated command execution.
Wavlink Wn531g3 Firmware
9.8
CVSSv3
CVE-2018-7242
Vulnerable hash algorithms exists in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules. The algorithm used to encrypt the password is vulnerable to hash collision attacks.
Schneider-electric Bmxnor0200 Firmware -
Schneider-electric Bmxnor0200h Firmware -
Schneider-electric 140cpu65150 Firmware -
Schneider-electric 140cpu31110 Firmware -
Schneider-electric 140cpu43412u Firmware -
Schneider-electric 140cpu65160 Firmware -
Schneider-electric 140cpu65260 Firmware -
Schneider-electric 140cpu65860 Firmware -
Schneider-electric 140cpu65160s Firmware -
Schneider-electric 140cpu65150c Firmware -
Schneider-electric 140cpu31110c Firmware -
Schneider-electric 140cpu43412uc Firmware -
Schneider-electric 140cpu65160c Firmware -
Schneider-electric 140cpu65260c Firmware -
Schneider-electric 140cpu65860c Firmware -
Schneider-electric Modicon M340 Bmxp341000 Firmware -
Schneider-electric Modicon M340 Bmxp342000 Firmware -
Schneider-electric Modicon M340 Bmxp3420102 Firmware -
Schneider-electric Modicon M340 Bmxp3420102cl Firmware -
Schneider-electric Modicon M340 Bmxp342020 Firmware -
Schneider-electric Modicon M340 Bmxp3420302 Firmware -
Schneider-electric Modicon M340 Bmxp3420302cl Firmware -
7.5
CVSSv3
CVE-2019-6851
A CWE-538: File and Directory Information Exposure vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (all firmware versions), which could cause the disclosure of information from the controller when using TFTP protocol.
Schneider-electric Modicon M580 Firmware
Schneider-electric Modicon M340 Firmware
Schneider-electric Tsxmcpc002m Firmware
Schneider-electric Tsxmcpc512k Firmware
Schneider-electric Tsxmfpp001m Firmware
Schneider-electric Tsxmfpp002m Firmware
Schneider-electric Tsxmfpp004m Firmware
Schneider-electric Tsxmfpp512k Firmware
Schneider-electric Tsxmrpc001m Firmware
Schneider-electric Tsxmrpc002m Firmware
Schneider-electric Tsxmrpc003m Firmware
Schneider-electric Tsxmrpc007m Firmware
Schneider-electric Tsxmrpc01m7 Firmware
Schneider-electric Tsxmrpc768k Firmware
Schneider-electric Tsxmrpf004m Firmware
Schneider-electric Tsxmrpf008m Firmware
Schneider-electric Tsxmfp0128p2 Firmware
Schneider-electric Tsxmfp064p2 Firmware
Schneider-electric Tsxmfpp224k Firmware
Schneider-electric Tsxmfpp384k Firmware
Schneider-electric Tsxmrpc448k Firmware
Schneider-electric Tsxmrpp224k Firmware
NA
CVE-2005-2056
The Quantum archive decompressor in Clam AntiVirus (ClamAV) prior to 0.86.1 allows remote malicious users to cause a denial of service (application crash) via a crafted Quantum archive.
Clam Anti-virus Clamav 0.85.1
Clam Anti-virus Clamav 0.86
Clam Anti-virus Clamav 0.85
9.8
CVSSv3
CVE-2018-7809
An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 which could allow an unauthenticated remote user to access the password delete function of the web server.
Schneider-electric Modicom M340 Firmware
Schneider-electric Modicom Premium Firmware
Schneider-electric Modicom Quantum Firmware
Schneider-electric Modicom Bmxnor0200h Firmware
7.5
CVSSv3
CVE-2018-7848
A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of SNMP information when reading files from the controller over Modbus
Schneider-electric Modicon M580 Firmware
Schneider-electric Modicon M340 Firmware
Schneider-electric Modicon Quantum Firmware
Schneider-electric Modicon Premium Firmware
1 Github repository
7.5
CVSSv3
CVE-2019-3915
Authentication Bypass by Capture-replay vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows an unauthenticated attacker with adjacent network access to intercept and replay login requests to gain access to the administrative web interface.
Verizon Fios Quantum Gateway G1100 Firmware 02.01.00.05
9.8
CVSSv3
CVE-2018-7811
An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 which could allow an unauthenticated remote user to access the change password function of the web server
Schneider-electric Modicom M340 Firmware
Schneider-electric Modicom Premium Firmware
Schneider-electric Modicom Quantum Firmware
Schneider-electric Modicom Bmxnor0200h Firmware
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48693
CVE-2024-30851
CVE-2024-34460
CVE-2024-2887
local
CVE-2024-27956
remote code execution
CVE-2024-34475
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
10
NEXT »