Browse CVEs

MEDIUM 6.1 CVE-2020-7481 A CWE-79:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists Andover Continuum (All versions), … Andover Continuum 9680 Firmware Mitigation only Fix from $1,6002020-03-23 MEDIUM 6.1 CVE-2020-7482 A CWE-79:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists Andover Continuum (All versions), … Andover Continuum 9680 Firmware Mitigation only Fix from $1,6002020-03-23 HIGH 7.8 CVE-2019-6854 A CWE-287: Improper Authentication vulnerability exists in a folder within EcoStruxure Geo SCADA Expert (ClearSCADA) -with initial releases before 1 … Clearscada Mitigation only Fix from $1,9502020-01-06 HIGH 7.5 CVE-2019-6852 A CWE-200: Information Exposure vulnerability exists in Modicon Controllers (M340 CPUs, M340 communication modules, Premium CPUs, Premium communicati… Bmx P34x Firmware Mitigation only Fix from $1,9502019-11-20 MEDIUM 6.1 CVE-2019-6853 A CWE-79: Failure to Preserve Web Page Structure vulnerability exists in Andover Continuum (models 9680, 5740 and 5720, bCX4040, bCX9640, 9900, 9940,… Andover Continuum 9680 Firmware Mitigation only Fix from $1,6002019-11-20 HIGH 8.6 CVE-2019-6848EPSS 33% A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 CPU (BMEx58*) and Modicon M580 communication module (BMEN… Modicon M580 Firmware Mitigation only Fix from $1,9502019-10-29 HIGH 7.5 CVE-2019-6845 A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (all… Modicon M580 Firmware Mitigation only Fix from $1,9502019-10-29 HIGH 7.5 CVE-2019-6849 A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure … Modicon M580 Firmware Mitigation only Fix from $1,9502019-10-29 HIGH 7.5 CVE-2019-6850 A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure … Modicon M580 Firmware Mitigation only Fix from $1,9502019-10-29 HIGH 7.5 CVE-2019-6851EPSS 30% A CWE-538: File and Directory Information Exposure vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (all firmwar… Modicon M580 Firmware Mitigation only Fix from $1,9502019-10-29 MEDIUM 6.5 CVE-2019-6846 A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all… Modicon M580 Firmware Mitigation only Fix from $1,6002019-10-29 HIGH 8.6 CVE-2019-6831 A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module (all firmware versio… Bmxnor0200h Firmware Mitigation only Fix from $1,9502019-09-17 HIGH 7.5 CVE-2019-6813 A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module (all firmware versio… Modicon M340 Firmware Mitigation only Fix from $1,9502019-09-17 MEDIUM 6.5 CVE-2019-6833 A CWE-754 – Improper Check for Unusual or Exceptional Conditions vulnerability exists in Magelis HMI Panels (all versions of - HMIGTO, HMISTO, XBTGH,… Hmigto Firmware Mitigation only Fix from $1,6002019-09-17 HIGH 8.8 CVE-2019-6810 CWE-284: Improper Access Control vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module (all firmware versions), which could cause the exec… Bmxnor0200h Firmware Mitigation only Fix from $1,9502019-09-17 HIGH 7.5 CVE-2018-7844 A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which co… Modicon Premium Firmware No fix yet Fix from $1,9502019-05-22 MEDIUM 5.9 CVE-2018-7803 A CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex TriStation Emulator V1.2.0, which could cause the emu… Triconex Tristation Emulator No fix yet Fix from $1,6002019-05-22 CRITICAL 9.1 CVE-2019-6815 In Modicon Quantum all firmware versions, CWE-264: Permissions, Privileges, and Access Control vulnerabilities could cause a denial of service or una… Modicon Quantum Firmware Mitigation only Fix from $2,3002019-05-22 CRITICAL 9.1 CVE-2019-6816 In Modicon Quantum all firmware versions, a CWE-94: Code Injection vulnerability could cause an unauthorized firmware modification with possible Deni… Modicon Quantum Firmware Mitigation only Fix from $2,3002019-05-22 HIGH 8.2 CVE-2019-6820 A CWE-306: Missing Authentication for Critical Function vulnerability exists which could cause a modification of device IP configuration (IP address,… Modicon M100 Firmware Mitigation only Fix from $1,9502019-05-22 CRITICAL 9.8 CVE-2018-7841 KEVEPSS 73% A SQL Injection (CWE-89) vulnerability exists in U.motion Builder software version 1.3.4 which could cause unwanted code execution when an improper s… U.motion Builder Mitigation only Fix from $2,3002019-05-22 CRITICAL 9.8 CVE-2018-7842EPSS 35% A CWE-290: Authentication Bypass by Spoofing vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Pre… Modicon M580 Firmware No fix yet Fix from $2,3002019-05-22 CRITICAL 9.8 CVE-2018-7846EPSS 30% A CWE-501: Trust Boundary Violation vulnerability on connection to the Controller exists in all versions of the Modicon M580, Modicon M340, Modicon Q… Modicon M580 Firmware No fix yet Fix from $2,3002019-05-22 CRITICAL 9.8 CVE-2018-7847 A CWE-284: Improper Access Control vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which… Modicon M580 Firmware No fix yet Fix from $2,3002019-05-22 HIGH 7.5 CVE-2018-7843 A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which coul… Modicon M580 Firmware No fix yet Fix from $1,9502019-05-22 HIGH 7.5 CVE-2018-7845 A CWE-125: Out-of-bounds Read vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which coul… Modicon M580 Firmware No fix yet Fix from $1,9502019-05-22 HIGH 7.5 CVE-2018-7849 A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and Modicon Premium which could… Modicon M580 Firmware No fix yet Fix from $1,9502019-05-22 HIGH 7.5 CVE-2018-7852 A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which coul… Modicon M580 Firmware No fix yet Fix from $1,9502019-05-22 HIGH 7.2 CVE-2019-6812 A CWE-798 use of hardcoded credentials vulnerability exists in BMX-NOR-0200H with firmware versions prior to V1.7 IR 19 which could cause a confident… Bmx Nor 0200h Firmware Mitigation only Fix from $1,9502019-05-22 MEDIUM 6.1 CVE-2018-7834 A CWE-79 Cross-Site Scripting vulnerability exists in all versions of the TSXETG100 allowing an attacker to send a specially crafted URL with an embe… Tsxetg100 Firmware Mitigation only Fix from $1,6002019-05-22