Browse CVEs

MEDIUM 5.3 CVE-2018-7850 A CWE-807: Reliance on Untrusted Inputs in a Security Decision vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantu… Modicon M580 Firmware Mitigation only Fix from $1,6002019-05-22 HIGH 7.3 CVE-2015-1014 A successful exploit of these vulnerabilities requires the local user to load a crafted DLL file in the system directory on servers running Schneider… Opc Factory Server Mitigation only Fix from $1,9502019-03-25 MEDIUM 5.4 CVE-2015-6461 Remote file inclusion allows an attacker to craft a specific URL referencing the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNO… Bmxnoc0401 Firmware Mitigation only Fix from $1,6002019-03-21 MEDIUM 5.4 CVE-2015-6462 Reflected Cross-Site Scripting (nonpersistent) allows an attacker to craft a specific URL, which contains Java script that will be executed on the Sc… Bmxnoc0401 Firmware Mitigation only Fix from $1,6002019-03-21 HIGH 7.8 CVE-2018-7813 A Type Confusion (CWE-843) vulnerability exists in Eurotherm by Schneider Electric GUIcon V2.0 (Gold Build 683.0) on pcwin.dll which could cause remo… Guicon Mitigation only Fix from $1,9502019-02-06 HIGH 7.8 CVE-2018-7814 A Stack-based Buffer Overflow (CWE-121) vulnerability exists in Eurotherm by Schneider Electric GUIcon V2.0 (Gold Build 683.0) which could cause remo… Guicon Mitigation only Fix from $1,9502019-02-06 HIGH 7.8 CVE-2018-7815 A Type Confusion (CWE-843) vulnerability exists in Eurotherm by Schneider Electric GUIcon V2.0 (Gold Build 683.0) on c3core.dll which could cause rem… Guicon Mitigation only Fix from $1,9502019-02-06 MEDIUM 5.5 CVE-2018-7839 A Cryptographic Issue (CWE-310) vulnerability exists in IIoT Monitor 3.1.38 which could allow information disclosure. Iiot Monitor No fix yet Fix from $1,6002019-02-06 CRITICAL 9.8 CVE-2018-7836EPSS 32% An unrestricted Upload of File with Dangerous Type vulnerability exists on numerous methods of the IIoT Monitor 3.1.38 software that could allow uplo… Iiot Monitor Mitigation only Fix from $2,3002018-12-24 HIGH 8.7 CVE-2018-7793 A Credential Management vulnerability exists in FoxView HMI SCADA (All Foxboro DCS, Foxboro Evo, and IA Series versions prior to Foxboro DCS Control … Foxboro Dcs Mitigation only Fix from $1,9502018-12-24 HIGH 7.5 CVE-2018-7835 An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in IIoT Monitor 3.1.38 which could allow acces… Iiot Monior Mitigation only Fix from $1,9502018-12-24 HIGH 7.5 CVE-2018-7837 An Improper Restriction of XML External Entity Reference ('XXE') vulnerability exists on numerous methods of the IIoT Monitor 3.1.38 software that co… Iiot Monior Mitigation only Fix from $1,9502018-12-24 MEDIUM 6.3 CVE-2018-7796 A Buffer Error vulnerability exists in PowerSuite 2, all released versions (VW3A8104 & Patches), which could cause an overflow in the memcpy function… Powersuite 2 Mitigation only Fix from $1,6002018-12-24 HIGH 7.5 CVE-2018-7812 An Information Exposure through Discrepancy vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR020… Modicom M340 Firmware Mitigation only Fix from $1,9502018-12-17 HIGH 7.5 CVE-2018-7833 An Improper Check for Unusual or Exceptional Conditions vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs a… Modicom M340 Firmware Mitigation only Fix from $1,9502018-12-17 MEDIUM 6.1 CVE-2018-7797 A URL redirection vulnerability exists in Power Monitoring Expert, Energy Expert (formerly Power Manager) - EcoStruxure Power Monitoring Expert (PME)… Ecostruxure Energy Expert Mitigation only Fix from $1,6002018-12-17 MEDIUM 6.1 CVE-2018-7804 A URL Redirection to Untrusted Site vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where … Modicom M340 Firmware Mitigation only Fix from $1,6002018-12-17 CRITICAL 9.8 CVE-2018-7809 An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 which could … Modicom M340 Firmware No fix yet Fix from $2,3002018-11-30 CRITICAL 9.8 CVE-2018-7811 An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 which could … Modicom M340 Firmware No fix yet Fix from $2,3002018-11-30 HIGH 8.8 CVE-2018-7806 Data Center Operation allows for the upload of a zip file from its user interface to the server. A carefully crafted, malicious file could be mistake… Struxureware Data Center Operation Mitigation only Fix from $1,9502018-11-30 HIGH 8.8 CVE-2018-7831 An Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability exists in the embedded web servers in all Modicon M340… Modicom M340 Firmware No fix yet Fix from $1,9502018-11-30 HIGH 7.5 CVE-2018-7830 Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability exists in the embedded web servers in all Modicon… Modicom M340 Firmware No fix yet Fix from $1,9502018-11-30 MEDIUM 6.1 CVE-2018-7810 An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in the embedded web servers in all Modic… Modicom M340 Firmware No fix yet Fix from $1,6002018-11-30 HIGH 8.2 CVE-2018-7798 A Insufficient Verification of Data Authenticity (CWE-345) vulnerability exists in the Modicon M221, all versions, which could cause a change of IPv4… Somachine Basic Mitigation only Fix from $1,9502018-11-02 CRITICAL 9.8 CVE-2018-7241 Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the c… Bmxnor0200 Firmware Mitigation only Fix from $2,3002018-04-18 CRITICAL 9.8 CVE-2018-7242 Vulnerable hash algorithms exists in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions … Bmxnor0200 Firmware Mitigation only Fix from $2,3002018-04-18 CRITICAL 9.8 CVE-2018-7243 An authorization bypass vulnerability exists In Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS. T… 66074 Mge Network Management Card Transverse Mitigation only Fix from $2,3002018-04-18 CRITICAL 9.8 CVE-2018-7246 A cleartext transmission of sensitive information vulnerability exists in Schneider Electric's 66074 MGE Network Management Card Transverse installed… 66074 Mge Network Management Card Transverse Mitigation only Fix from $2,3002018-04-18 CRITICAL 9.8 CVE-2018-7760 An authorization bypass vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. Requests to CGI … Bmxnor0200 Firmware Mitigation only Fix from $2,3002018-04-18 CRITICAL 9.8 CVE-2018-7761 A vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could … Bmxnor0200 Firmware Mitigation only Fix from $2,3002018-04-18