modicon_quantum_140noe77111_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/modicon_quantum_140noe77111_firmware/ Sun, 26 Feb 2023 06:43:05 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png modicon_quantum_140noe77111_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/modicon_quantum_140noe77111_firmware/ 32 32 CVE-2020-7562 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-7562/ Sun, 26 Feb 2023 06:43:05 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-7562/ A CWE-125: Out-of-Bounds Read vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause a segmentation fault or a buffer overflow when uploading a specially crafted file on the controller over FTP.

The post CVE-2020-7562 appeared first on CVE Vulnerability.

]]> A CWE-125: Out-of-Bounds Read vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause a segmentation fault or a buffer overflow when uploading a specially crafted file on the controller over FTP.

The post CVE-2020-7562 appeared first on CVE Vulnerability.

]]> CVE-2020-7563 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-7563/ Sun, 26 Feb 2023 06:43:05 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-7563/ A CWE-787: Out-of-bounds Write vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause corruption of data, a crash, or code execution when uploading a specially crafted file on the controller over FTP.

The post CVE-2020-7563 appeared first on CVE Vulnerability.

]]> A CWE-787: Out-of-bounds Write vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause corruption of data, a crash, or code execution when uploading a specially crafted file on the controller over FTP.

The post CVE-2020-7563 appeared first on CVE Vulnerability.

]]> CVE-2020-7564 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-7564/ Sun, 26 Feb 2023 06:43:05 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-7564/ A CWE-120: Buffer Copy without Checking Size of Input (‘Classic Buffer Overflow’) vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause write access and the execution of commands when uploading a specially crafted file on the controller […]

The post CVE-2020-7564 appeared first on CVE Vulnerability.

]]> A CWE-120: Buffer Copy without Checking Size of Input (‘Classic Buffer Overflow’) vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause write access and the execution of commands when uploading a specially crafted file on the controller over FTP.

The post CVE-2020-7564 appeared first on CVE Vulnerability.

]]> CVE-2019-6811 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6811/ Sun, 26 Feb 2023 06:34:05 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6811/ An Improper Check for Unusual or Exceptional Conditions (CWE-754) vulnerability exists in Modicon Quantum 140 NOE771x1 version 6.9 and earlier, which could cause denial of service when the module receives an IP fragmented packet with a length greater than 65535 bytes. The module then requires a power cycle to recover.

The post CVE-2019-6811 appeared first on CVE Vulnerability.

]]> An Improper Check for Unusual or Exceptional Conditions (CWE-754) vulnerability exists in Modicon Quantum 140 NOE771x1 version 6.9 and earlier, which could cause denial of service when the module receives an IP fragmented packet with a length greater than 65535 bytes. The module then requires a power cycle to recover.

The post CVE-2019-6811 appeared first on CVE Vulnerability.

]]> CVE-2022-37301 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-37301/ Thu, 23 Feb 2023 05:20:02 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-37301/ A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus TCP protocol. Affected products: Modicon M340 CPU (part numbers BMXP34*)(V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*)(V3.22 and prior), Legacy Modicon Quantum/Premium(All Versions), Modicon […]

The post CVE-2022-37301 appeared first on CVE Vulnerability.

]]> A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus TCP protocol. Affected products: Modicon M340 CPU (part numbers BMXP34*)(V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*)(V3.22 and prior), Legacy Modicon Quantum/Premium(All Versions), Modicon Momentum MDI (171CBU*)(All Versions), Modicon MC80 (BMKC80)(V1.7 and prior)

The post CVE-2022-37301 appeared first on CVE Vulnerability.

]]>