CveMateVulnerability intelligence

Schneider Electric Modicon M580 vulnerabilities

24 vulnerabilities

Known vulnerabilities in Schneider Electric Modicon M580, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2018-7848schneider-electricmodicon_m340_firmware+17y ago22-05-2019 19:59

A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of SNMP information when reading files from the controller over Modbus CVE-2018-7854schneider-electricmodicon_m340_firmware+17y ago22-05-2019 20:02

A CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a denial of Service when sending invalid debug parameters to the controller over Modbus.CVE-2018-7794schneider electric semodicon m580, modicon m340, modicon quantum, modicon premium (see security notification for specific versions)+296y ago06-01-2020 22:57

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service when reading data with invalid index using Modbus TCP.CVE-2018-7857schneider-electricmodicon_m340_firmware+37y ago22-05-2019 20:04

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible Denial of Service when writing out of bounds variables to the controller over Modbus.CVE-2018-7855schneider-electricmodicon_m340_firmware+37y ago22-05-2019 20:03

A CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a Denial of Service when sending invalid breakpoint parameters to the controller over Modbus CVE-2018-7856schneider-electricmodicon_m340_firmware+37y ago22-05-2019 20:03

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible denial of Service when writing invalid memory blocks to the controller over Modbus.CVE-2018-7853schneider-electricmodicon_m340_firmware+37y ago22-05-2019 20:02

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when reading invalid physical memory blocks in the controller over Modbus CVE-2020-7475schneider-electricecostruxure_control_expert+26y ago23-03-2020 18:56

A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), reflective DLL, vulnerability exists in EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all versions prior to V3.20), Modicon M580 (all versions prior to V3.10), which, if exploited, could allow attackers to transfer malicious code to the controller.CVE-2019-6806schneider-electricmodicon_m340_firmware+37y ago22-05-2019 20:04

A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of SNMP information when reading variables in the controller using Modbus.CVE-2019-6829schneider electric semodicon m340+37y ago17-09-2019 19:44

A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware version prior to V2.90) and Modicon M340 (firmware version prior to V3.10), which could cause a possible denial of service when writing to specific memory addresses in the controller over Modbus.CVE-2019-6856schneider electric semodicon m580, modicon m340, modicon quantum, modicon premium (see security notification for specific versions)+296y ago06-01-2020 22:57

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service when writing specific physical memory blocks using Modbus TCP.CVE-2019-6830schneider electric semodicon m580+17y ago17-09-2019 19:21

A CWE-248: Uncaught Exception vulnerability exists IN Modicon M580 all versions prior to V2.80, which could cause a possible denial of service when sending an appropriately timed HTTP request to the controller.CVE-2019-6809schneider electric semodicon m340+57y ago17-09-2019 19:50

A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware versions prior to V2.90), Modicon M340 (firmware versions prior to V3.10), Modicon Premium (all versions), Modicon Quantum (all versions), which could cause a possible denial of service when reading invalid data from the controller.CVE-2019-6807schneider-electricmodicon_m340_firmware+17y ago22-05-2019 20:05

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible denial of service when writing sensitive application variables to the controller over Modbus.CVE-2019-6848schneider-electricmodicon_bmenoc_0311_firmware+26y ago29-10-2019 14:53

A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 CPU (BMEx58*) and Modicon M580 communication module (BMENOC0311, BMENOC0321) (see notification for version info), which could cause a Denial of Service attack on the PLC when sending specific data on the REST API of the controller/communication module.CVE-2019-6850schneider-electricmodicon_bmenoc_0311_firmware+26y ago29-10-2019 14:54

A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure of sensitive information when reading specific registers with the REST API of the controller/communication module.CVE-2019-6819schneider-electricmodicon_m340_firmware+17y ago22-05-2019 19:45

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists which could cause a possible Denial of Service when specific Modbus frames are sent to the controller in the products: Modicon M340 - firmware versions prior to V3.01, Modicon M580 - firmware versions prior to V2.80, All firmware versions of Modicon Quantum and Modicon Premium.CVE-2019-6849schneider-electricmodicon_bmenoc_0311_firmware+26y ago29-10-2019 14:53

A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure of sensitive information when using specific Modbus services provided by the REST API of the controller/communication module.CVE-2019-6821schneider-electricmodicon_m580_firmware7y ago22-05-2019 19:42

CWE-330: Use of Insufficiently Random Values vulnerability, which could cause the hijacking of the TCP connection when using Ethernet communication in Modicon M580 firmware versions prior to V2.30, and all firmware versions of Modicon M340, Modicon Premium, Modicon Quantum.CVE-2019-6857schneider electric semodicon m580, modicon m340, modicon quantum, modicon premium (see security notification for specific versions)+296y ago06-01-2020 22:57

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service of the controller when reading specific memory blocks using Modbus TCP.