Product:

Modicon_premium_firmware

(Schneider\-Electric)
Repositories

Unknown:

This might be proprietary software.

#Vulnerabilities 23
Date Id Summary Products Score Patch Annotated
2019-05-22 CVE-2019-6808 A CWE-284: Improper Access Control vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a remote code execution by overwriting configuration settings of the controller over Modbus. Modicon_m340_firmware, Modicon_m580_firmware, Modicon_premium_firmware, Modicon_quantum_firmware 9.8
2019-09-17 CVE-2019-6809 A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware versions prior to V2.90), Modicon M340 (firmware versions prior to V3.10), Modicon Premium (all versions), Modicon Quantum (all versions), which could cause a possible denial of service when reading invalid data from the controller. Modicon_m340_firmware, Modicon_m580_firmware, Modicon_premium_firmware, Modicon_quantum_firmware 7.5
2019-09-17 CVE-2019-6828 A CWE-248: Uncaught Exception vulnerability exists Modicon M580 (firmware version prior to V2.90), Modicon M340 (firmware version prior to V3.10), Modicon Premium (all versions), and Modicon Quantum (all versions), which could cause a possible denial of service when reading specific coils and registers in the controller over Modbus. Modicon_m340_firmware, Modicon_m580_firmware, Modicon_premium_firmware, Modicon_quantum_firmware 7.5