Schneider Electric Modicon PLC Vulnerabilities
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2015-6462US | medium5.4 | — | ||
Reflected Cross-Site Scripting (nonpersistent) allows an attacker to craft a specific URL, which contains Java script that will be executed on the Schneider Electric Modicon BMXNOC… | ||||
| CVE-2015-6461US | medium5.4 | — | ||
Remote file inclusion allows an attacker to craft a specific URL referencing the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-15-246-02 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-15-246-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (2)
- MitigationModicon PLC
In addition, specific modules and firmware versions allow the HTTP/FTP server to be disabled through configuration settings, please consult your product documentation for further information.
- MitigationModicon PLC
In addition, specific modules and firmware versions allow the HTTP/FTP server to be disabled through configuration settings, please consult your product documentation for further information.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan