Modicon M580 Bmep584040 Firmware (Schneider-electric) - vulnerabilities (CVEs)
12 CVEs, 0 in the last 30 days, 14 known versions, newest CVE from 2024-02-14. Vendor: Schneider-electric.
CVEs of Modicon M580 Bmep584040 Firmware
- CVE-2023-6408 - CVSS 8.1 (high), 2024-02-14: CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause a denial of service…
- CVE-2021-22786 - CVSS 7.5 (high), 2023-02-01: A CWE-200: Information Exposure vulnerability exists that could cause the exposure of sensitive information stored on the memory of the controller when…
- CVE-2022-45789 - CVSS 9.8 (critical), 2023-01-31: A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbus functions on the controller when…
- CVE-2022-45788 - CVSS 9.8 (critical), 2023-01-30: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code execution, denial of service and loss of…
- CVE-2022-37301 - CVSS 7.5 (high), 2022-11-22: A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations…
- CVE-2022-37300 - CVSS 9.8 (critical), 2022-09-12: A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists that could cause unauthorized access in read and write mode to the…
- CVE-2021-22779 - CVSS 9.1 (critical), 2021-07-14: Authentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro),…
- CVE-2020-7537 - CVSS 7.5 (high), 2020-12-11: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum &…
- CVE-2020-7543 - CVSS 7.5 (high), 2020-12-11: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum &…
- CVE-2020-7542 - CVSS 7.5 (high), 2020-12-11: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum &…
- CVE-2019-6855 - CVSS 7.3 (high), 2020-01-06: Incorrect Authorization vulnerability exists in EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all…
- CVE-2018-7838 - CVSS 7.5 (high), 2019-07-15: A CWE-119 Buffer Errors vulnerability exists in Modicon M580 CPU - BMEP582040, all versions before V2.90, and Modicon Ethernet Module BMENOC0301, all versions…
