Schneider Electric Modicon PLCs
ATTENTION: Remotely exploitable/low skill level to exploit.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2017-6030US | medium6.5 | — | ||
A predictable value range from previous values issue was discovered in Schneider Electric Modicon PLCs Modicon M221, firmware versions prior to Version 1.5.0.0, Modicon M241, firmw… | ||||
| CVE-2017-6028US | critical9.8 | — | ||
An Insufficiently Protected Credentials issue was discovered in Schneider Electric Modicon PLCs Modicon M241, all firmware versions, and Modicon M251, all firmware versions. Log-in… | ||||
| CVE-2017-6026US | critical9.1OT hoch | Exploit | ||
A Use of Insufficiently Random Values issue was discovered in Schneider Electric Modicon PLCs Modicon M241, firmware versions prior to Version 4.0.5.11, and Modicon M251, firmware… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (9)
- MitigationModicon M221
Do not grant [network] access to unknown computers
- MitigationModicon M221
Do not grant [network] access to unknown computers
- MitigationModicon M221
Do not grant [network] access to unknown computers
- MitigationModicon M241
Do not grant [network] access to unknown computers
- MitigationModicon M241
Do not grant [network] access to unknown computers
- MitigationModicon M241
Do not grant [network] access to unknown computers
- MitigationModicon M251
Do not grant [network] access to unknown computers
- MitigationModicon M251
Do not grant [network] access to unknown computers
- MitigationModicon M251
Do not grant [network] access to unknown computers
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan