Modicon Vulnérabilités

Chronologie

Taper

Produit

Modicon M34012
Modicon Premium12
Modicon BMXNOR020012
Modicon Quantum PLCs10
Modicon Quantum PLC2

Contre-mesures

Official Fix0
Temporary Fix0
Workaround0
Unavailable0
Not Defined14

Exploitabilité

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined14

Vecteur d'accès

Not Defined0
Physical0
Local0
Adjacent0
Network14

Authentification

Not Defined0
High0
Low0
None14

Interaction de l'utilisateur

Not Defined0
Required4
None10

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤50
≤64
≤74
≤82
≤94
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤50
≤64
≤74
≤82
≤94
≤100

VulDB

≤10
≤20
≤30
≤42
≤54
≤62
≤70
≤86
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤72
≤86
≤92
≤104

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Fournisseur

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 jour

<1k4
<2k4
<5k6
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter aujourd'hui

<1k14
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter le volume du marché

🔴 CTI Activités

Affected Products (15): BMXNOR0200 (8), Controller (1), EcoStruxure Control ExpertUnity Pro (1), Ethernet Module BMENOC0301 (1), M218 (2), M241 (2), M251 (2), M258 (2), M340 (9), M580 (1), M580 CPU BMEP582040 (1), Modicon M580 (1), Premium (8), Quantum PLC (3), Quantum PLCs (5)

PubliéBaseTempVulnérabilitéProdExpConEPSSCTICVE
22/04/20205.65.6Modicon M218/M241/M251/M258 chiffrement faibleSCADA SoftwareNot DefinedNot Defined0.001680.04CVE-2020-7488
22/04/20208.58.5Modicon M218/M241/M251/M258 authentification faibleSCADA SoftwareNot DefinedNot Defined0.002220.00CVE-2020-7487
22/04/20207.47.4Modicon Controller Communication Module authentification faibleSCADA SoftwareNot DefinedNot Defined0.001680.00CVE-2019-6859
23/03/20208.58.2Modicon /EcoStruxure Control ExpertUnity Pro/M340/M580 Downstream Component elévation de privilègesSCADA SoftwareNot DefinedOfficial Fix0.002330.04CVE-2020-7475
29/10/20193.83.8Modicon Modicon M580 Application elévation de privilègesSCADA SoftwareNot DefinedNot Defined0.000810.00CVE-2019-6847
15/07/20197.57.3Modicon M580 CPU BMEP582040/Ethernet Module BMENOC0301 FTP Service buffer overflowSCADA SoftwareNot DefinedOfficial Fix0.001030.00CVE-2018-7838
17/12/20186.46.4Modicon M340/Premium/Quantum PLC/BMXNOR0200 Embedded Web Server elévation de privilègesSCADA SoftwareNot DefinedNot Defined0.001100.00CVE-2018-7833
17/12/20186.46.4Modicon M340/Premium/Quantum PLC/BMXNOR0200 Embedded Web Server divulgation de l'informationSCADA SoftwareNot DefinedNot Defined0.001780.04CVE-2018-7812
17/12/20186.66.6Modicon M340/Premium/Quantum PLC/BMXNOR0200 Embedded Web Server RedirectSCADA SoftwareNot DefinedNot Defined0.000780.02CVE-2018-7804
30/11/20186.56.5Modicon M340/Premium/Quantum PLCs/BMXNOR0200 Embedded Web Server cross site request forgerySCADA SoftwareNot DefinedNot Defined0.000980.00CVE-2018-7831

4 plus d'entrées ne sont pas affichées

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!