Schneider Electric Modicon Quantum vulnerabilities
7 vulnerabilities
Known vulnerabilities in Schneider Electric Modicon Quantum, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2018-7857schneider-electricmodicon_m340_firmware+3
EPSS score1.58%
A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible Denial of Service when writing out of bounds variables to the controller over Modbus.CVE-2018-7855schneider-electricmodicon_m340_firmware+3EPSS score2.65%
A CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a Denial of Service when sending invalid breakpoint parameters to the controller over ModbusCVE-2018-7788schneider-electricmodicon_quantum_firmwareEPSS score1.11%
A CWE-255 Credentials Management vulnerability exists in Modicon Quantum with firmware versions prior to V2.40. which could cause a Denial Of Service when using a Telnet connection.CVE-2018-7856schneider-electricmodicon_m340_firmware+3EPSS score1.58%
A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible denial of Service when writing invalid memory blocks to the controller over Modbus.CVE-2018-7853schneider-electricmodicon_m340_firmware+3EPSS score1.82%
A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when reading invalid physical memory blocks in the controller over ModbusCVE-2019-6806schneider-electricmodicon_m340_firmware+3EPSS score2.30%
A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of SNMP information when reading variables in the controller using Modbus.CVE-2019-6808schneider-electricmodicon_m340_firmware+3EPSS score8.16%
A CWE-284: Improper Access Control vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a remote code execution by overwriting configuration settings of the controller over Modbus.