Schneider Electric Modicon Premium, Modicon Quantum, Modicon M340, and Modicon BMXNOR0200
ATTENTION: Exploitable remotely/low skill level to exploit.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2018-7242US | critical9.8OT erhöht | — | ||
Vulnerable hash algorithms exists in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules. T… | ||||
| CVE-2018-7241US | critical9.8OT erhöht | — | ||
Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules. | ||||
| CVE-2018-7240US | high8.8 | — | ||
A vulnerability exists in Schneider Electric's Modicon Quantum in all versions of the communication modules which could allow arbitrary code execution. An FTP command used to upgra… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (12)
- MitigationModicon M340
Schneider Electric also recommends that affected users disable FTP services on the device during times when maintenance or configuration activities are not needed.
- MitigationModicon M340
Schneider Electric also recommends that affected users disable FTP services on the device during times when maintenance or configuration activities are not needed.
- MitigationModicon M340
Schneider Electric also recommends that affected users disable FTP services on the device during times when maintenance or configuration activities are not needed.
- MitigationModicon Premium
Schneider Electric also recommends that affected users disable FTP services on the device during times when maintenance or configuration activities are not needed.
- MitigationModicon Premium
Schneider Electric also recommends that affected users disable FTP services on the device during times when maintenance or configuration activities are not needed.
- MitigationModicon Premium
Schneider Electric also recommends that affected users disable FTP services on the device during times when maintenance or configuration activities are not needed.
- MitigationModicon Quantum
Schneider Electric also recommends that affected users disable FTP services on the device during times when maintenance or configuration activities are not needed.
- MitigationModicon Quantum
Schneider Electric also recommends that affected users disable FTP services on the device during times when maintenance or configuration activities are not needed.
- MitigationModicon Quantum
Schneider Electric also recommends that affected users disable FTP services on the device during times when maintenance or configuration activities are not needed.
- MitigationModicon X80 RTU (BMXNOR0200H)
Schneider Electric also recommends that affected users disable FTP services on the device during times when maintenance or configuration activities are not needed.
- MitigationModicon X80 RTU (BMXNOR0200H)
Schneider Electric also recommends that affected users disable FTP services on the device during times when maintenance or configuration activities are not needed.
- MitigationModicon X80 RTU (BMXNOR0200H)
Schneider Electric also recommends that affected users disable FTP services on the device during times when maintenance or configuration activities are not needed.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan