Modicon M580 Bmep584040s Firmware (Schneider-electric) - vulnerabilities (CVEs)

8 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2024-02-14. Vendor: Schneider-electric.

CVEs of Modicon M580 Bmep584040s Firmware

• CVE-2023-6408 - CVSS 8.1 (high), 2024-02-14: CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause a denial of service…
• CVE-2021-22786 - CVSS 7.5 (high), 2023-02-01: A CWE-200: Information Exposure vulnerability exists that could cause the exposure of sensitive information stored on the memory of the controller when…
• CVE-2022-45789 - CVSS 9.8 (critical), 2023-01-31: A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbus functions on the controller when…
• CVE-2022-45788 - CVSS 9.8 (critical), 2023-01-30: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code execution, denial of service and loss of…
• CVE-2022-37301 - CVSS 7.5 (high), 2022-11-22: A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations…
• CVE-2022-37300 - CVSS 9.8 (critical), 2022-09-12: A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists that could cause unauthorized access in read and write mode to the…
• CVE-2021-22779 - CVSS 9.1 (critical), 2021-07-14: Authentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro),…
• CVE-2019-6855 - CVSS 7.3 (high), 2020-01-06: Incorrect Authorization vulnerability exists in EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all…