Priority MEDIUM 48
Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03697 · Published 2018-04-18 · No fix listed CWE-798
Priority MEDIUM 47
CWE-287: Improper Authentication vulnerability exists which could cause the execution of commands on the webserver without authentication when sending specially crafted HTTP requests.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02336 · Published 2020-12-01 · No fix listed CWE-287
Priority MEDIUM 46
A vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow arbitrary code execution.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02098 · Published 2018-04-18 · No fix listed CWE-20
Priority MEDIUM 46
Vulnerable hash algorithms exists in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01884 · Published 2018-04-18 · No fix listed CWE-326
Priority MEDIUM 45
An authorization bypass vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01469 · Published 2018-04-18 · No fix listed CWE-287
Priority MEDIUM 44
A vulnerability exists in Schneider Electric's Modicon Quantum in all versions of the communication modules which could allow arbitrary code execution.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03201 · Published 2018-04-18 · No fix listed CWE-787
Priority MEDIUM 42
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Quantum Ethernet Network module 140NOE771x1 (Versions 7.0 and prior), Quantum processors with integrated Ethernet – 140CPU65xxxxx (a…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01321 · Published 2020-03-23 · No fix listed CWE-754
Priority MEDIUM 42
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a D…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0163 · Published 2020-01-06 · No fix listed CWE-754
Priority MEDIUM 42
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a D…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0163 · Published 2020-01-06 · No fix listed CWE-754
Priority MEDIUM 42
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a D…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01399 · Published 2020-01-06 · No fix listed CWE-754
Priority LOW 35
A vulnerability exists in the web services to process SOAP requests in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow result in a buffer overflow.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01291 · Published 2018-04-18 · No fix listed CWE-119
Priority LOW 35
A buffer overflow vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01291 · Published 2018-04-18 · No fix listed CWE-119