Modicom Premium Firmware (Schneider-electric) - vulnerabilities (CVEs)

8 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2018-12-17. Vendor: Schneider-electric.

CVEs of Modicom Premium Firmware

• CVE-2018-7804 - CVSS 6.1 (medium), 2018-12-17: A URL Redirection to Untrusted Site vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where a user…
• CVE-2018-7833 - CVSS 7.5 (high), 2018-12-17: An Improper Check for Unusual or Exceptional Conditions vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and…
• CVE-2018-7812 - CVSS 7.5 (high), 2018-12-17: An Information Exposure through Discrepancy vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where…
• CVE-2018-7811 - CVSS 9.8 (critical), 2018-11-30: An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 which could allow an…
• CVE-2018-7810 - CVSS 6.1 (medium), 2018-11-30: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in the embedded web servers in all Modicon M340,…
• CVE-2018-7831 - CVSS 8.8 (high), 2018-11-30: An Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability exists in the embedded web servers in all Modicon M340,…
• CVE-2018-7809 - CVSS 9.8 (critical), 2018-11-30: An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 which could allow an…
• CVE-2018-7830 - CVSS 7.5 (high), 2018-11-30: Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability exists in the embedded web servers in all Modicon M340,…