Schneider Electric Modicon M580 vulnerabilities, page 2

24 vulnerabilities

Known vulnerabilities in Schneider Electric Modicon M580, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2019-6808schneider-electricmodicon_m340_firmware+3
EPSS score
8.16%
A CWE-284: Improper Access Control vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a remote code execution by overwriting configuration settings of the controller over Modbus.7.8CVE-2019-6828schneider electric semodicon m340+5
EPSS score
1.53%
A CWE-248: Uncaught Exception vulnerability exists Modicon M580 (firmware version prior to V2.90), Modicon M340 (firmware version prior to V3.10), Modicon Premium (all versions), and Modicon Quantum (all versions), which could cause a possible denial of service when reading specific coils and registers in the controller over Modbus.6.5CVE-2023-25620schneider electriclegacy modicon premium cpus (tsxp57*)+8
EPSS score
0.59%
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when a malicious project file is loaded onto the controller by an authenticated user.7.5CVE-2023-25619schneider electriclegacy modicon premium cpus (tsxp57*)+8
EPSS score
0.62%
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when communicating over the Modbus TCP protocol.