Schneider Electric vulnerabilities, page 4

711 vulnerabilities

Known vulnerabilities in Schneider Electric products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 899 products.

8.8HighCVE-2018-7777schneider electric se · u.motion +1 moreschneider electric se u.motionThe vulnerability is due to insufficient handling of update_file request parameter on update_module.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. A remote, authenticated attacker can exploit this vulnerability by sending a crafted request to the target server.EPSS31.80%9.8CriticalCVE-2018-7760schneider electric se · modicon m340, modicon premium, modicon quantum, bmxnor0201 +57 moreschneider electric se modicon m340, modicon premium, modicon quantum, bmxnor0201An authorization bypass vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. Requests to CGI functions allow malicious users to bypass authorization.EPSS1.47%6.5MediumCVE-2018-7758schneider electric se · micom p540d range with legacy ethernet board +23 moreschneider electric se micom p540d range with legacy ethernet boardA denial of service vulnerability exists in Schneider Electric's MiCOM Px4x (P540 range excluded) with legacy Ethernet board, MiCOM P540D Range with Legacy Ethernet Board, and MiCOM Px4x Rejuvenated could lose network communication in case of TCP/IP open requests on port 20000 (DNP3oE) if an older TCI/IP session is still open with identical IP address and port number.EPSS0.62%7.5HighCVE-2018-7792schneider electric se · modicon m221, all references, all versions prior to firmware v1.6.2.0 +1 moreschneider electric se modicon m221, all references, all versions prior to firmware v1.6.2.0A Permissions, Privileges, and Access Control vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versions prior to firmware V1.6.2.0). The vulnerability allows unauthorized users to decode the password using rainbow table.EPSS1.05%6.5MediumCVE-2018-7788schneider-electric · modicon_quantum_firmwareschneider-electric modicon_quantum_firmwareA CWE-255 Credentials Management vulnerability exists in Modicon Quantum with firmware versions prior to V2.40. which could cause a Denial Of Service when using a Telnet connection.EPSS1.11%8.8HighCVE-2018-7802schneider electric se · evlink parking v3.2.0-12_v1 and earlier +1 moreschneider electric se evlink parking v3.2.0-12_v1 and earlierA SQL Injection vulnerability exists in EVLink Parking, v3.2.0-12_v1 and earlier, which could give access to the web interface with full privileges.EPSS2.33%5.9MediumCVE-2018-7803schneider-electric · triconex_tristation_emulatorschneider-electric triconex_tristation_emulatorA CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex TriStation Emulator V1.2.0, which could cause the emulator to crash when sending a specially crafted packet. The emulator is used infrequently for application logic testing. It is susceptible to an attack only while running in off-line mode. This vulnerability does not exist in Triconex hardware products and therefore has no effect on the operating safety functions in a plant.EPSS1.14%10CriticalCVE-2018-7241schneider electric se · modicon premium, modicon quantum, modicon m340, bmxnor0200 +57 moreschneider electric se modicon premium, modicon quantum, modicon m340, bmxnor0200Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules.EPSS3.70%7.5HighCVE-2018-7779schneider electric se · wiser for knx +3 moreschneider electric se wiser for knxIn Schneider Electric Wiser for KNX V2.1.0 and prior, homeLYnk V2.0.1 and prior; and spaceLYnk V2.1.0 and prior, weak and unprotected FTP access could allow an attacker unauthorized access.EPSS1.39%5.3MediumCVE-2018-7787schneider electric se · u.motion builder +1 moreschneider electric se u.motion builderIn Schneider Electric U.motion Builder software versions prior to v1.3.4, this vulnerability is due to improper validation of input of context parameter in HTTP GET request.EPSS1.09%9.8CriticalCVE-2018-7784schneider electric se · u.motion builder +1 moreschneider electric se u.motion builderIn Schneider Electric U.motion Builder software versions prior to v1.3.4, this exploit occurs when the submitted data of an input string is evaluated as a command by the application. In this way, the attacker could execute code, read the stack, or cause a segmentation fault in the running application.EPSS2.27%7.8HighCVE-2018-7813schneider electric se · eurotherm by schneider electric guicon v2.0 (gold build 683.0) +1 moreschneider electric se eurotherm by schneider electric guicon v2.0 (gold build 683.0)A Type Confusion (CWE-843) vulnerability exists in Eurotherm by Schneider Electric GUIcon V2.0 (Gold Build 683.0) on pcwin.dll which could cause remote code to be executed when parsing a GD1 fileEPSS1.14%8.8HighCVE-2018-7774schneider electric se · u.motion +1 moreschneider electric se u.motionThe vulnerability exists within processing of localize.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the username input parameter.EPSS0.97%8.8HighCVE-2018-7240schneider electric se · modicon quantum +13 moreschneider electric se modicon quantumA vulnerability exists in Schneider Electric's Modicon Quantum in all versions of the communication modules which could allow arbitrary code execution. An FTP command used to upgrade the firmware of the module can be misused to cause a denial of service, or in extreme cases, to load a malicious firmware.EPSS3.20%8.8HighCVE-2018-7765schneider electric se · u.motion +1 moreschneider electric se u.motionThe vulnerability exists within processing of track_import_export.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the object_id input parameter.EPSS2.92%6.8MediumCVE-2018-7851schneider-electric · bmx\/e_cra_firmware +2 moreschneider-electric bmx\/e_cra_firmwareCWE-119: Buffer errors vulnerability exists in Modicon M580 with firmware prior to V2.50, Modicon M340 with firmware prior to V3.01, BMxCRA312xx with firmware prior to V2.40, All firmware versions of Modicon Premium and 140CRA312xxx when sending a specially crafted Modbus packet, which could cause a denial of service to the device that would force a restart to restore availability.EPSS1.17%10CriticalCVE-2018-7800schneider electric se · evlink parking v3.2.0-12_v1 and earlier +1 moreschneider electric se evlink parking v3.2.0-12_v1 and earlierA Hard-coded Credentials vulnerability exists in EVLink Parking, v3.2.0-12_v1 and earlier, which could enable an attacker to gain access to the device.EPSS3.95%8.8HighCVE-2018-7767schneider electric se · u.motion +1 moreschneider electric se u.motionThe vulnerability exists within processing of editobject.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the type input parameter.EPSS0.97%7.8HighCVE-2018-7789schneider electric se · modicon m221, all references, all versions prior to firmware v1.6.2.0 +1 moreschneider electric se modicon m221, all references, all versions prior to firmware v1.6.2.0An Improper Check for Unusual or Exceptional Conditions vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versions prior to firmware V1.6.2.0). The vulnerability allows unauthorized users to remotely reboot Modicon M221 using crafted programing protocol frames.EPSS2.80%8.8HighCVE-2018-7782schneider electric se · pelco sarix professional v1 +20 moreschneider electric se pelco sarix professional v1In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, authenticated users can view passwords in clear text.EPSS0.80%