Browse CVEs

HIGH 8.2 CVE-2019-6820 A CWE-306: Missing Authentication for Critical Function vulnerability exists which could cause a modification of device IP configuration (IP address,… Modicon M100 Firmware Mitigation only Fix from $1,9502019-05-22 HIGH 7.5 CVE-2019-6819 A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists which could cause a possible Denial of Service when specific Mod… Modicon M340 Firmware 2.80 / 3.01+ Fix from $1,9502019-05-22 MEDIUM 6.5 CVE-2019-6821 CWE-330: Use of Insufficiently Random Values vulnerability, which could cause the hijacking of the TCP connection when using Ethernet communication i… Modicon M580 Firmware 2.30+ Fix from $1,6002019-05-22 CRITICAL 9.8 CVE-2018-7841 KEVEPSS 73% A SQL Injection (CWE-89) vulnerability exists in U.motion Builder software version 1.3.4 which could cause unwanted code execution when an improper s… U.motion Builder Mitigation only Fix from $2,3002019-05-22 CRITICAL 9.8 CVE-2018-7842EPSS 35% A CWE-290: Authentication Bypass by Spoofing vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Pre… Modicon M580 Firmware No fix yet Fix from $2,3002019-05-22 CRITICAL 9.8 CVE-2018-7846EPSS 30% A CWE-501: Trust Boundary Violation vulnerability on connection to the Controller exists in all versions of the Modicon M580, Modicon M340, Modicon Q… Modicon M580 Firmware No fix yet Fix from $2,3002019-05-22 CRITICAL 9.8 CVE-2018-7847 A CWE-284: Improper Access Control vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which… Modicon M580 Firmware No fix yet Fix from $2,3002019-05-22 CRITICAL 9.8 CVE-2019-6814EPSS 37% A CWE-287: Improper Authentication vulnerability exists in the NET55XX Encoder with firmware prior to version 2.1.9.7 which could cause impact to con… Net5501 Firmware 2.1.9.7+ Fix from $2,3002019-05-22 HIGH 8.8 CVE-2018-7825 A Command Injection vulnerability exists in the web-based GUI of the 1st Gen PelcoSarix Enhanced Camera that could allow a remote attacker to execute… D6220 Firmware 2.2.3.0+ Fix from $1,9502019-05-22 HIGH 8.8 CVE-2018-7826 A Command Injection vulnerability exists in the web-based GUI of the 1st Gen Pelco Sarix Enhanced Camera that could allow a remote attacker to execut… D6220 Firmware 2.2.3.0+ Fix from $1,9502019-05-22 HIGH 8.8 CVE-2018-7828 A Cross-Site Request Forgery (CSRF) vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera when an authenti… D6220 Firmware 2.2.3.0+ Fix from $1,9502019-05-22 HIGH 8.8 CVE-2018-7829 An Improper Neutralization of Special Elements in Query vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Cam… D6220 Firmware 2.2.3.0+ Fix from $1,9502019-05-22 HIGH 7.5 CVE-2018-7821 An Environment (CWE-2) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior to firmware V1.10.0… Somachine Basic 1.10.0.0+ Fix from $1,9502019-05-22 HIGH 7.5 CVE-2018-7843 A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which coul… Modicon M580 Firmware No fix yet Fix from $1,9502019-05-22 HIGH 7.5 CVE-2018-7845 A CWE-125: Out-of-bounds Read vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which coul… Modicon M580 Firmware No fix yet Fix from $1,9502019-05-22 HIGH 7.5 CVE-2018-7848 A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which co… Modicon M580 Firmware 2.90 / 3.10+ Fix from $1,9502019-05-22 HIGH 7.5 CVE-2018-7849 A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and Modicon Premium which could… Modicon M580 Firmware No fix yet Fix from $1,9502019-05-22 HIGH 7.5 CVE-2018-7852 A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which coul… Modicon M580 Firmware No fix yet Fix from $1,9502019-05-22 HIGH 7.2 CVE-2019-6812 A CWE-798 use of hardcoded credentials vulnerability exists in BMX-NOR-0200H with firmware versions prior to V1.7 IR 19 which could cause a confident… Bmx Nor 0200h Firmware Mitigation only Fix from $1,9502019-05-22 MEDIUM 6.5 CVE-2018-7851 CWE-119: Buffer errors vulnerability exists in Modicon M580 with firmware prior to V2.50, Modicon M340 with firmware prior to V3.01, BMxCRA312xx with… M580 Firmware 2.40 / 2.50+ Fix from $1,6002019-05-22 MEDIUM 6.1 CVE-2018-7834 A CWE-79 Cross-Site Scripting vulnerability exists in all versions of the TSXETG100 allowing an attacker to send a specially crafted URL with an embe… Tsxetg100 Firmware Mitigation only Fix from $1,6002019-05-22 MEDIUM 5.5 CVE-2018-7822 An Incorrect Default Permissions (CWE-276) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior… Somachine Basic 1.10.0.0+ Fix from $1,6002019-05-22 MEDIUM 5.4 CVE-2018-7827 A Cross-Site Scripting (XSS) vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera which a remote attacker… D6220 Firmware 2.2.3.0+ Fix from $1,6002019-05-22 MEDIUM 5.3 CVE-2018-7823 A Environment (CWE-2) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior to firmware V1.10.0.… Somachine Basic 1.10.0.0+ Fix from $1,6002019-05-22 MEDIUM 5.3 CVE-2018-7850 A CWE-807: Reliance on Untrusted Inputs in a Security Decision vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantu… Modicon M580 Firmware Mitigation only Fix from $1,6002019-05-22 MEDIUM 6.5 CVE-2018-7788 A CWE-255 Credentials Management vulnerability exists in Modicon Quantum with firmware versions prior to V2.40. which could cause a Denial Of Service… Modicon Quantum Firmware 2.40+ Fix from $1,6002019-05-22 MEDIUM 6.5 CVE-2018-7816 A Permissions, Privileges, and Access Control vulnerability exists in the web-based GUI of the 1st Gen Pelco Sarix Enhanced Camera that could allow a… D6220 Firmware 2.2.3.0+ Fix from $1,6002019-05-22 HIGH 7.3 CVE-2015-1014 A successful exploit of these vulnerabilities requires the local user to load a crafted DLL file in the system directory on servers running Schneider… Opc Factory Server Mitigation only Fix from $1,9502019-03-25 MEDIUM 5.4 CVE-2015-6461 Remote file inclusion allows an attacker to craft a specific URL referencing the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNO… Bmxnoc0401 Firmware Mitigation only Fix from $1,6002019-03-21 MEDIUM 5.4 CVE-2015-6462 Reflected Cross-Site Scripting (nonpersistent) allows an attacker to craft a specific URL, which contains Java script that will be executed on the Sc… Bmxnoc0401 Firmware Mitigation only Fix from $1,6002019-03-21