140cpu65160_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/140cpu65160_firmware/ Sun, 26 Feb 2023 06:43:05 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png 140cpu65160_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/140cpu65160_firmware/ 32 32 CVE-2020-7535 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-7535/ Sun, 26 Feb 2023 06:43:05 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-7535/ A CWE-22: Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’ Vulnerability Type) vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause disclosure of information when sending a specially crafted request to the […]

The post CVE-2020-7535 appeared first on CVE Vulnerability.

]]> A CWE-22: Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’ Vulnerability Type) vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause disclosure of information when sending a specially crafted request to the controller over HTTP.

The post CVE-2020-7535 appeared first on CVE Vulnerability.

]]> CVE-2020-7540 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-7540/ Sun, 26 Feb 2023 06:43:05 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-7540/ A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause unauthenticated command execution in the controller when sending special HTTP requests.

The post CVE-2020-7540 appeared first on CVE Vulnerability.

]]> A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause unauthenticated command execution in the controller when sending special HTTP requests.

The post CVE-2020-7540 appeared first on CVE Vulnerability.

]]>