Product by Schneider Electric
Modicon M580 CPU Safety
29 known vulnerabilities in Modicon M580 CPU Safety (Schneider Electric), 0 of them actively exploited (CISA KEV).
Key figures
29
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
7
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2018-7241 | Schneider-Electric 140CPU31110 Firmware: security vulnerability | 9.8 | |
| Critical | CVE-2020-35198 | Oracle Communications Eagle: Integer Overflow | 9.8 | |
| High | CVE-2018-7240 | Schneider Electric Modicon Quantum: Denial of Service | 8.8 | |
| Medium | CVE-2019-6841 | Schneider-Electric Modicon 140CRA Firmware: Improper Handling of Exceptional Conditions | 4.9 | |
| Critical | CVE-2018-7242 | Schneider-Electric 140CPU31110 Firmware: security vulnerability | 9.8 | |
| Critical | CVE-2021-22156 | BlackBerry QNX Software Development Platform (SDP): Integer Overflow or Wraparound | 9.0 | |
| Critical | CVE-2022-45789 | Schneider Electric EcoStruxure Control Expert: Authentication Bypass by Capture-replay | 8.1 | |
| High | CVE-2020-28895 | integer overflow in calloc | 7.3 | |
| Critical | CVE-2021-22779 | Schneider Electric Ecostruxure Control Expert: Authentication Bypass by Spoofing | 9.1 | |
| Critical | CVE-2022-37300 | Schneider Electric EcoStruxure Control Expert: Weak Password Recovery Mechanism for Forgotten Password | 9.8 | |
| High | CVE-2021-22792 | Schneider Electric Modicon M340 Bmxp341000: NULL Pointer Dereference | 7.5 | |
| Not rated | CVE-2011-4859 | Schneider Electric Quantum Ethernet Module 140noe77100: Hard-coded Credentials | — | |
| High | CVE-2022-37301 | Schneider Electric Modicon M340 CPU (part numbers BMXP34*): Integer Underflow (Wrap or Wraparound) | 7.5 | |
| Medium | CVE-2019-6846 | Schneider-Electric Modicon 140CRA Firmware: Cleartext Transmission of Sensitive Information | 6.5 | |
| High | CVE-2021-22786 | Schneider Electric Modicon M340 CPU (part numbers BMXP34*): Exposure of Sensitive Information to an Unauthorized Actor | 7.5 | |
| Medium | CVE-2021-22789 | Schneider Electric Modicon M340 Bmxp341000: Improper Restriction of Operations within the Bounds of a Memory Buffer | 6.5 | |
| Medium | CVE-2021-22791 | Schneider Electric Modicon M340 Bmxp341000: Out-of-bounds Write | 6.5 | |
| Medium | CVE-2021-22790 | Schneider Electric Modicon M340 Bmxp341000: Out-of-bounds Read | 6.5 | |
| Medium | CVE-2019-6844 | Schneider-Electric Modicon 140CRA Firmware: Improper Handling of Exceptional Conditions | 4.9 | |
| Medium | CVE-2019-6843 | Schneider-Electric Modicon 140CRA Firmware: Improper Handling of Exceptional Conditions | 4.9 | |
| Medium | CVE-2019-6842 | Schneider-Electric Modicon 140CRA Firmware: Improper Handling of Exceptional Conditions | 4.9 | |
| Medium | CVE-2019-6847 | Schneider-Electric Modicon 140CRA Firmware: Improper Handling of Exceptional Conditions | 4.9 | |
| High | CVE-2023-6408 | Schneider Electric Modicon M340 CPU (part numbers BMXP34*): Improper Enforcement of Message Integrity During Transmission in a Communication Channel | 8.1 | |
| High | CVE-2023-6409 | Schneider Electric EcoStruxure Control Expert: Use of Hard-coded Credentials | 7.7 | |
| High | CVE-2023-27975 | Schneider Electric EcoStruxure Control Expert: Insufficiently Protected Credentials | 7.1 |