Vulnerability index

Browse CVEs

689 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Modicon M100 Firmware HIGH 8.2
CVE-2019-6820

A CWE-306: Missing Authentication for Critical Function vulnerability exists which could cause a modification of device IP configuration (IP address,…

Mitigation only
Fix from $1,950 2019-05-22
Modicon M340 Firmware HIGH 7.5
CVE-2019-6819

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists which could cause a possible Denial of Service when specific Mod…

Fix: 2.80 / 3.01+
Fix from $1,950 2019-05-22
Modicon M580 Firmware MEDIUM 6.5
CVE-2019-6821

CWE-330: Use of Insufficiently Random Values vulnerability, which could cause the hijacking of the TCP connection when using Ethernet communication i…

Fix: 2.30+
Fix from $1,600 2019-05-22
U.motion Builder CRITICAL 9.8
CVE-2018-7841 KEVEPSS 73%

A SQL Injection (CWE-89) vulnerability exists in U.motion Builder software version 1.3.4 which could cause unwanted code execution when an improper s…

Mitigation only
Fix from $2,300 2019-05-22
Modicon M580 Firmware CRITICAL 9.8
CVE-2018-7842EPSS 35%

A CWE-290: Authentication Bypass by Spoofing vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Pre…

No fix yet
Fix from $2,300 2019-05-22
Modicon M580 Firmware CRITICAL 9.8
CVE-2018-7846EPSS 30%

A CWE-501: Trust Boundary Violation vulnerability on connection to the Controller exists in all versions of the Modicon M580, Modicon M340, Modicon Q…

No fix yet
Fix from $2,300 2019-05-22
Modicon M580 Firmware CRITICAL 9.8
CVE-2018-7847

A CWE-284: Improper Access Control vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which…

No fix yet
Fix from $2,300 2019-05-22
Net5501 Firmware CRITICAL 9.8
CVE-2019-6814EPSS 37%

A CWE-287: Improper Authentication vulnerability exists in the NET55XX Encoder with firmware prior to version 2.1.9.7 which could cause impact to con…

Fix: 2.1.9.7+
Fix from $2,300 2019-05-22
D6220 Firmware HIGH 8.8
CVE-2018-7825

A Command Injection vulnerability exists in the web-based GUI of the 1st Gen PelcoSarix Enhanced Camera that could allow a remote attacker to execute…

Fix: 2.2.3.0+
Fix from $1,950 2019-05-22
D6220 Firmware HIGH 8.8
CVE-2018-7826

A Command Injection vulnerability exists in the web-based GUI of the 1st Gen Pelco Sarix Enhanced Camera that could allow a remote attacker to execut…

Fix: 2.2.3.0+
Fix from $1,950 2019-05-22
D6220 Firmware HIGH 8.8
CVE-2018-7828

A Cross-Site Request Forgery (CSRF) vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera when an authenti…

Fix: 2.2.3.0+
Fix from $1,950 2019-05-22
D6220 Firmware HIGH 8.8
CVE-2018-7829

An Improper Neutralization of Special Elements in Query vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Cam…

Fix: 2.2.3.0+
Fix from $1,950 2019-05-22
Somachine Basic HIGH 7.5
CVE-2018-7821

An Environment (CWE-2) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior to firmware V1.10.0…

Fix: 1.10.0.0+
Fix from $1,950 2019-05-22
Modicon M580 Firmware HIGH 7.5
CVE-2018-7843

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which coul…

No fix yet
Fix from $1,950 2019-05-22
Modicon M580 Firmware HIGH 7.5
CVE-2018-7845

A CWE-125: Out-of-bounds Read vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which coul…

No fix yet
Fix from $1,950 2019-05-22
Modicon M580 Firmware HIGH 7.5
CVE-2018-7848

A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which co…

Fix: 2.90 / 3.10+
Fix from $1,950 2019-05-22
Modicon M580 Firmware HIGH 7.5
CVE-2018-7849

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and Modicon Premium which could…

No fix yet
Fix from $1,950 2019-05-22
Modicon M580 Firmware HIGH 7.5
CVE-2018-7852

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which coul…

No fix yet
Fix from $1,950 2019-05-22
Bmx Nor 0200h Firmware HIGH 7.2
CVE-2019-6812

A CWE-798 use of hardcoded credentials vulnerability exists in BMX-NOR-0200H with firmware versions prior to V1.7 IR 19 which could cause a confident…

Mitigation only
Fix from $1,950 2019-05-22
M580 Firmware MEDIUM 6.5
CVE-2018-7851

CWE-119: Buffer errors vulnerability exists in Modicon M580 with firmware prior to V2.50, Modicon M340 with firmware prior to V3.01, BMxCRA312xx with…

Fix: 2.40 / 2.50+
Fix from $1,600 2019-05-22
Tsxetg100 Firmware MEDIUM 6.1
CVE-2018-7834

A CWE-79 Cross-Site Scripting vulnerability exists in all versions of the TSXETG100 allowing an attacker to send a specially crafted URL with an embe…

Mitigation only
Fix from $1,600 2019-05-22
Somachine Basic MEDIUM 5.5
CVE-2018-7822

An Incorrect Default Permissions (CWE-276) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior…

Fix: 1.10.0.0+
Fix from $1,600 2019-05-22
D6220 Firmware MEDIUM 5.4
CVE-2018-7827

A Cross-Site Scripting (XSS) vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera which a remote attacker…

Fix: 2.2.3.0+
Fix from $1,600 2019-05-22
Somachine Basic MEDIUM 5.3
CVE-2018-7823

A Environment (CWE-2) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior to firmware V1.10.0.…

Fix: 1.10.0.0+
Fix from $1,600 2019-05-22
Modicon M580 Firmware MEDIUM 5.3
CVE-2018-7850

A CWE-807: Reliance on Untrusted Inputs in a Security Decision vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantu…

Mitigation only
Fix from $1,600 2019-05-22
Modicon Quantum Firmware MEDIUM 6.5
CVE-2018-7788

A CWE-255 Credentials Management vulnerability exists in Modicon Quantum with firmware versions prior to V2.40. which could cause a Denial Of Service…

Fix: 2.40+
Fix from $1,600 2019-05-22
D6220 Firmware MEDIUM 6.5
CVE-2018-7816

A Permissions, Privileges, and Access Control vulnerability exists in the web-based GUI of the 1st Gen Pelco Sarix Enhanced Camera that could allow a…

Fix: 2.2.3.0+
Fix from $1,600 2019-05-22
Opc Factory Server HIGH 7.3
CVE-2015-1014

A successful exploit of these vulnerabilities requires the local user to load a crafted DLL file in the system directory on servers running Schneider…

Mitigation only
Fix from $1,950 2019-03-25
Bmxnoc0401 Firmware MEDIUM 5.4
CVE-2015-6461

Remote file inclusion allows an attacker to craft a specific URL referencing the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNO…

Mitigation only
Fix from $1,600 2019-03-21
Bmxnoc0401 Firmware MEDIUM 5.4
CVE-2015-6462

Reflected Cross-Site Scripting (nonpersistent) allows an attacker to craft a specific URL, which contains Java script that will be executed on the Sc…

Mitigation only
Fix from $1,600 2019-03-21