Schneider Electric SE Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200
8 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2018-7833 | Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 | An Improper Check for Unusual or Exceptional Conditions vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quant | HIGH 7.5 | 1.4 % | ||
| CVE-2018-7812 | Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 | An Information Exposure through Discrepancy vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and | HIGH 7.5 | 3.7 % | ||
| CVE-2018-7804 | Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 | A URL Redirection to Untrusted Site vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR02 | MEDIUM 6.1 | 0.9 % | ||
| CVE-2018-7831 | Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 | An Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability exists in the embedded web servers in all Mod | HIGH 8.8 | 0.6 % | ||
| CVE-2018-7830 | Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 | Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability exists in the embedded web servers in al | HIGH 7.5 | 2.4 % | ||
| CVE-2018-7811 | Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 | An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 whi | CRITICAL 9.8 | 3.5 % | ||
| CVE-2018-7810 | Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in the embedded web servers in | MEDIUM 6.1 | 0.9 % | ||
| CVE-2018-7809 | Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 | An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 whi | CRITICAL 9.8 | 2.5 % |