Filtered by vendor Schneider-electric Subscriptions
Filtered by product Modicon M100 Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-7489 1 Schneider-electric 8 Ecostruxure Machine Expert, Modicon M100, Modicon M100 Firmware and 5 more 2024-11-21 9.8 Critical
A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability exists on EcoStruxure Machine Expert – Basic or SoMachine Basic programming software (versions in security notification). The result of this vulnerability, DLL substitution, could allow the transference of malicious code to the controller.
CVE-2019-6820 1 Schneider-electric 24 Atv Imc Drive Controller, Atv Imc Drive Controller Firmware, Modicon Lmc058 and 21 more 2024-11-21 8.2 High
A CWE-306: Missing Authentication for Critical Function vulnerability exists which could cause a modification of device IP configuration (IP address, network mask and gateway IP address) when a specific Ethernet frame is received in all versions of: Modicon M100, Modicon M200, Modicon M221, ATV IMC drive controller, Modicon M241, Modicon M251, Modicon M258, Modicon LMC058, Modicon LMC078, PacDrive Eco ,PacDrive Pro, PacDrive Pro2