Schneider Electric Modicon M340 Luki w zabezpieczeniach

Oś czasu

Wersja

BMXNOx1
BMXPx1
Bmxp3420xx1

Przeciwdziałanie

Official Fix20
Temporary Fix0
Workaround4
Unavailable0
Not Defined52

Wykorzystywanie

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined76

Wektor dostępu

Not Defined0
Physical3
Local0
Adjacent11
Network62

Uwierzytelnianie

Not Defined0
High4
Low16
None56

Interakcja z użytkownikiem

Not Defined0
Required7
None69

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤47
≤59
≤67
≤727
≤816
≤910
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤47
≤59
≤69
≤727
≤815
≤99
≤100

VulDB

≤10
≤20
≤37
≤47
≤58
≤630
≤73
≤819
≤92
≤100

NVD

≤10
≤20
≤30
≤40
≤54
≤63
≤72
≤833
≤94
≤1011

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤84
≤92
≤101

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k22
<2k40
<5k14
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k72
<2k4
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Versions (3): BMXNOx, BMXPx, Bmxp3420xx

Link to Product Website: https://www.schneider-electric.com/

Typ oprogramowania: SCADA Software

OpublikowanoBaseTempSłaby punkt0dayDzisiajWykPrzCTICVE
2024-02-148.17.9Schneider Electric Modicon M340 CPU privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-6408
2023-02-016.46.3Schneider Electric Modicon M340 CPU Modbus TCP Protocol information disclosure$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-22786
2023-01-318.78.7Schneider Electric EcoStruxure Control Expert weak authentication$0-$5k$0-$5kNot DefinedNot Defined0.05CVE-2022-45789
2023-01-307.47.4Schneider Electric EcoStruxure Control Expert Project File privilege escalation$0-$5k$0-$5kNot DefinedNot Defined0.03CVE-2022-45788
2022-11-227.57.3Schneider Electric Modicon M340 CPU Ethernet privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2022-0222
2022-11-227.57.5Schneider Electric Modicon MC80 Modbus TCP Protocol memory corruption$0-$5k$0-$5kNot DefinedNot Defined0.02CVE-2022-37301
2022-09-138.58.5Schneider Electric EcoStruxure Control Expert Modbus privilege escalation$0-$5k$0-$5kNot DefinedNot Defined0.03CVE-2022-37300
2022-02-125.55.3Schneider Electric Modicon M340 CPU Web Server memory corruption$0-$5kObliczenieNot DefinedOfficial Fix0.00CVE-2021-22788
2022-02-123.53.4Schneider Electric Modicon M340 CPU Web Server denial of service$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-22787
2022-02-123.53.4Schneider Electric Modicon M340 CPU Web Server information disclosure$0-$5k$0-$5kNot DefinedOfficial Fix0.05CVE-2021-22785

66 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 66 results.

więcej wpisów autorstwa Schneider Electric

◂ PoprzedniPrzeglądKolejny ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!