140cpu65150_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/140cpu65150_firmware/ Sun, 26 Feb 2023 06:43:05 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png 140cpu65150_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/140cpu65150_firmware/ 32 32 CVE-2020-7539 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-7539/ Sun, 26 Feb 2023 06:43:05 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-7539/ A CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause a denial of service vulnerability when a specially crafted packet is sent to the controller over HTTP.

The post CVE-2020-7539 appeared first on CVE Vulnerability.

]]> A CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause a denial of service vulnerability when a specially crafted packet is sent to the controller over HTTP.

The post CVE-2020-7539 appeared first on CVE Vulnerability.

]]> CVE-2020-7541 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-7541/ Sun, 26 Feb 2023 06:43:05 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-7541/ A CWE-425: Direct Request (‘Forced Browsing’) vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause disclosure of sensitive data when sending a specially crafted request to the controller over HTTP.

The post CVE-2020-7541 appeared first on CVE Vulnerability.

]]> A CWE-425: Direct Request (‘Forced Browsing’) vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause disclosure of sensitive data when sending a specially crafted request to the controller over HTTP.

The post CVE-2020-7541 appeared first on CVE Vulnerability.

]]> CVE-2020-7542 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-7542/ Sun, 26 Feb 2023 06:43:05 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-7542/ A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions), that could cause denial of service when a specially crafted Read Physical Memory request over Modbus is sent to the controller.

The post CVE-2020-7542 appeared first on CVE Vulnerability.

]]> A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions), that could cause denial of service when a specially crafted Read Physical Memory request over Modbus is sent to the controller.

The post CVE-2020-7542 appeared first on CVE Vulnerability.

]]> CVE-2020-7549 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-7549/ Sun, 26 Feb 2023 06:43:05 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-7549/ A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause denial of HTTP and FTP services when a series of specially crafted requests is sent to the […]

The post CVE-2020-7549 appeared first on CVE Vulnerability.

]]> A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause denial of HTTP and FTP services when a series of specially crafted requests is sent to the controller over HTTP.

The post CVE-2020-7549 appeared first on CVE Vulnerability.

]]> CVE-2021-22785 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-22785/ Thu, 23 Feb 2023 14:07:23 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-22785/ A CWE-200: Information Exposure vulnerability exists that could cause sensitive information of files located in the web root directory to leak when an attacker sends a HTTP request to the web server of the device. Affected Product: Modicon M340 CPUs: BMXP34 (Versions prior to V3.40), Modicon M340 X80 Ethernet Communication Modules: BMXNOE0100 (H), BMXNOE0110 (H), […]

The post CVE-2021-22785 appeared first on CVE Vulnerability.

]]> A CWE-200: Information Exposure vulnerability exists that could cause sensitive information of files located in the web root directory to leak when an attacker sends a HTTP request to the web server of the device. Affected Product: Modicon M340 CPUs: BMXP34 (Versions prior to V3.40), Modicon M340 X80 Ethernet Communication Modules: BMXNOE0100 (H), BMXNOE0110 (H), BMXNOC0401, BMXNOR0200H RTU (All Versions), Modicon Premium Processors with integrated Ethernet (Copro): TSXP574634, TSXP575634, TSXP576634 (All Versions), Modicon Quantum Processors with Integrated Ethernet (Copro): 140CPU65xxxxx (All Versions), Modicon Quantum Communication Modules: 140NOE771x1, 140NOC78x00, 140NOC77101 (All Versions), Modicon Premium Communication Modules: TSXETY4103, TSXETY5103 (All Versions)

The post CVE-2021-22785 appeared first on CVE Vulnerability.

]]> CVE-2021-22787 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-22787/ Thu, 23 Feb 2023 14:07:23 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-22787/ A CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of the device when an attacker sends a specially crafted HTTP request to the web server of the device. Affected Product: Modicon M340 CPUs: BMXP34 (Versions prior to V3.40), Modicon M340 X80 Ethernet Communication Modules: BMXNOE0100 (H), BMXNOE0110 (H), BMXNOC0401, BMXNOR0200H RTU […]

The post CVE-2021-22787 appeared first on CVE Vulnerability.

]]> A CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of the device when an attacker sends a specially crafted HTTP request to the web server of the device. Affected Product: Modicon M340 CPUs: BMXP34 (Versions prior to V3.40), Modicon M340 X80 Ethernet Communication Modules: BMXNOE0100 (H), BMXNOE0110 (H), BMXNOC0401, BMXNOR0200H RTU (All Versions), Modicon Premium Processors with integrated Ethernet (Copro): TSXP574634, TSXP575634, TSXP576634 (All Versions), Modicon Quantum Processors with Integrated Ethernet (Copro): 140CPU65xxxxx (All Versions), Modicon Quantum Communication Modules: 140NOE771x1, 140NOC78x00, 140NOC77101 (All Versions), Modicon Premium Communication Modules: TSXETY4103, TSXETY5103 (All Versions)

The post CVE-2021-22787 appeared first on CVE Vulnerability.

]]> CVE-2021-22788 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-22788/ Thu, 23 Feb 2023 14:07:23 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-22788/ A CWE-787: Out-of-bounds Write vulnerability exists that could cause denial of service when an attacker sends a specially crafted HTTP request to the web server of the device. Affected Product: Modicon M340 CPUs: BMXP34 (Versions prior to V3.40), Modicon M340 X80 Ethernet Communication Modules: BMXNOE0100 (H), BMXNOE0110 (H), BMXNOC0401, BMXNOR0200H RTU (All Versions), Modicon Premium […]

The post CVE-2021-22788 appeared first on CVE Vulnerability.

]]> A CWE-787: Out-of-bounds Write vulnerability exists that could cause denial of service when an attacker sends a specially crafted HTTP request to the web server of the device. Affected Product: Modicon M340 CPUs: BMXP34 (Versions prior to V3.40), Modicon M340 X80 Ethernet Communication Modules: BMXNOE0100 (H), BMXNOE0110 (H), BMXNOC0401, BMXNOR0200H RTU (All Versions), Modicon Premium Processors with integrated Ethernet (Copro): TSXP574634, TSXP575634, TSXP576634 (All Versions), Modicon Quantum Processors with Integrated Ethernet (Copro): 140CPU65xxxxx (All Versions), Modicon Quantum Communication Modules: 140NOE771x1, 140NOC78x00, 140NOC77101 (All Versions), Modicon Premium Communication Modules: TSXETY4103, TSXETY5103 (All Versions)

The post CVE-2021-22788 appeared first on CVE Vulnerability.

]]>