Browse CVEs

CRITICAL 9.8 CVE-2018-7761 A vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could … Bmxnor0200 Firmware Mitigation only Fix from $2,3002018-04-18 CRITICAL 9.1 CVE-2018-7245 An improper authorization vulnerability exists In Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS.… 66074 Mge Network Management Card Transverse Mitigation only Fix from $2,3002018-04-18 HIGH 8.8 CVE-2018-7240 A vulnerability exists in Schneider Electric's Modicon Quantum in all versions of the communication modules which could allow arbitrary code executio… 140cpu65150 Firmware Mitigation only Fix from $1,9502018-04-18 HIGH 7.5 CVE-2018-7759 A buffer overflow vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. The buffer overflow vu… Bmxnor0200 Firmware Mitigation only Fix from $1,9502018-04-18 HIGH 7.5 CVE-2018-7762 A vulnerability exists in the web services to process SOAP requests in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNO… Bmxnor0200 Firmware Mitigation only Fix from $1,9502018-04-18 MEDIUM 6.5 CVE-2018-7758 A denial of service vulnerability exists in Schneider Electric's MiCOM Px4x (P540 range excluded) with legacy Ethernet board, MiCOM P540D Range with … Micom P141 Firmware Mitigation only Fix from $1,6002018-04-18 MEDIUM 5.3 CVE-2018-7244 An information disclosure vulnerability exists In Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS.… 66074 Mge Network Management Card Transverse Mitigation only Fix from $1,6002018-04-18 CRITICAL 9.8 CVE-2018-7228 A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticate… Mps110 1 Firmware 3.29.67+ Fix from $2,3002018-03-09 CRITICAL 9.8 CVE-2018-7229 A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticate… Mps110 1 Firmware 3.29.67+ Fix from $2,3002018-03-09 CRITICAL 9.8 CVE-2018-7231 A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow execution of comm… Mps110 1 Firmware 3.29.67+ Fix from $2,3002018-03-09 CRITICAL 9.8 CVE-2018-7232 A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow execution of comm… Mps110 1 Firmware 3.29.67+ Fix from $2,3002018-03-09 CRITICAL 9.8 CVE-2018-7233 A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow execution of comm… Mps110 1 Firmware 3.29.67+ Fix from $2,3002018-03-09 CRITICAL 9.8 CVE-2018-7238 A buffer overflow vulnerability exist in the web-based GUI of Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67… Mps110 1 Firmware 3.29.67+ Fix from $2,3002018-03-09 CRITICAL 9.1 CVE-2018-7237 A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow a remote attacker… Mps110 1 Firmware 3.29.67+ Fix from $2,3002018-03-09 HIGH 8.8 CVE-2018-7230 A XML external entity (XXE) vulnerability exists in the import.cgi of the web interface component of the Schneider Electric's Pelco Sarix Professiona… Mps110 1 Firmware 3.29.67+ Fix from $1,9502018-03-09 HIGH 8.1 CVE-2018-7236 A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could enable SSH service due … Mps110 1 Firmware 3.29.67+ Fix from $1,9502018-03-09 HIGH 7.8 CVE-2018-7239 A DLL hijacking vulnerability exists in Schneider Electric's SoMove Software and associated DTM software components in all versions prior to 2.6.2 wh… Atv Lift Dtm 1.1.6 / 1.2.3+ Fix from $1,9502018-03-09 HIGH 7.5 CVE-2018-7234 A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow arbitrary system … Mps110 1 Firmware 3.29.67+ Fix from $1,9502018-03-09 HIGH 7.5 CVE-2018-7235 A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow arbitrary system … Mps110 1 Firmware 3.29.67+ Fix from $1,9502018-03-09 MEDIUM 5.3 CVE-2018-7227 A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow retrieving of spe… Mps110 1 Firmware 3.29.67+ Fix from $1,6002018-03-09 HIGH 8.1 CVE-2017-9963 A cross-site request forgery vulnerability exists on the Secure Gateway component of Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with… Powerscada Anywhere Mitigation only Fix from $1,9502018-02-12 HIGH 7.8 CVE-2017-9967 A security misconfiguration vulnerability exists in Schneider Electric's IGSS SCADA Software versions 12 and prior. Security configuration settings s… Interactive Graphical Scada System after 12.0 Fix from $1,9502018-02-12 HIGH 7.2 CVE-2017-9970 A remote code execution vulnerability exists in Schneider Electric's StruxureOn Gateway versions 1.1.3 and prior. Uploading a zip which contains care… Struxureon Gateway after 1.1.3 Fix from $1,9502018-02-12 MEDIUM 6.7 CVE-2017-9969 An information disclosure vulnerability exists in Schneider Electric's IGSS Mobile application version 3.01 and prior. Passwords are stored in clear … Igss Mobile after 3.01 Fix from $1,6002018-02-12 MEDIUM 5.9 CVE-2017-9968 A security misconfiguration vulnerability exists in Schneider Electric's IGSS Mobile application versions 3.01 and prior in which a lack of certifica… Igss Mobile after 3.01 Fix from $1,6002018-02-12 HIGH 7.1 CVE-2017-9966 A privilege escalation vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. By replacing certain files, a… Pelco Videoxpert 2.1+ Fix from $1,9502018-01-02 MEDIUM 6.9 CVE-2017-9964 A Path Traversal issue was discovered in Schneider Electric Pelco VideoXpert Enterprise all versions prior to 2.1. By sniffing communications, an una… Pelco Videoxpert 2.1+ Fix from $1,6002018-01-02 MEDIUM 5.8 CVE-2017-9965 An exposure of sensitive information vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. Using a directo… Pelco Videoxpert 2.1+ Fix from $1,6002018-01-02 CRITICAL 9.8 CVE-2017-14024EPSS 6% A Stack-based Buffer Overflow issue was discovered in Schneider Electric InduSoft Web Studio v8.0 SP2 Patch 1 and prior versions, and InTouch Machine… Wonderware Indusoft Web Studio after 8.0 Fix from $2,3002017-11-13 CRITICAL 9.8 CVE-2017-13997EPSS 5% A Missing Authentication for Critical Function issue was discovered in Schneider Electric InduSoft Web Studio v8.0 SP2 or prior, and InTouch Machine … Wonderware Indusoft Web Studio after 8.0 Fix from $2,3002017-10-03