Product by Schneider Electric
Modicon M580 Firmware
41 known vulnerabilities in Modicon M580 Firmware (Schneider Electric), 0 of them actively exploited (CISA KEV).
Key figures
41
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2018-7842 | Modicon M580 Modicon M340 Modicon Quantum Modicon Premium: Authentication Bypass | 9.8 | |
| Critical | CVE-2018-7846 | Modicon M580 Modicon M340 Modicon Quantum Modicon Premium: security vulnerability | 9.8 | |
| Critical | CVE-2019-6808 | Modicon M580 Modicon M340 Modicon Quantum Modicon Premium: Improper Access Control | 9.8 | |
| High | CVE-2019-6848 | Schneider-Electric Modicon BMENOC 0311 Firmware: Improper Handling of Exceptional Conditions | 8.6 | |
| High | CVE-2019-6851 | Schneider-Electric Modicon M340 Firmware: Insertion of Sensitive Information into Externally-Accessible File or Directory | 7.5 | |
| Critical | CVE-2018-7847 | Modicon M580 Modicon M340 Modicon Quantum Modicon Premium: Improper Access Control | 9.8 | |
| High | CVE-2018-7852 | Modicon M580 Modicon M340 Modicon Quantum Modicon Premium: Denial of Service | 7.5 | |
| Medium | CVE-2019-6841 | Schneider-Electric Modicon 140CRA Firmware: Improper Handling of Exceptional Conditions | 4.9 | |
| High | CVE-2018-7845 | Modicon M580 Modicon M340 Modicon Quantum Modicon Premium: Out-of-Bounds Read | 7.5 | |
| High | CVE-2018-7848 | Modicon M580 Modicon M340 Modicon Quantum Modicon Premium: Information Disclosure | 7.5 | |
| High | CVE-2018-7849 | Modicon M580 Modicon M340 Modicon Quantum Modicon Premium: Denial of Service | 7.5 | |
| High | CVE-2018-7844 | Modicon M580 Modicon M340 Modicon Quantum Modicon Premium: Information Disclosure | 7.5 | |
| High | CVE-2018-7843 | Modicon M580 Modicon M340 Modicon Quantum Modicon Premium: Denial of Service | 7.5 | |
| High | CVE-2018-7855 | Modicon M580 Modicon M340 Modicon Quantum Modicon Premium: Denial of Service | 7.5 | |
| Critical | CVE-2020-7475 | Schneider Electric Ecostruxure Control Expert: Injection | 9.8 | |
| High | CVE-2019-6806 | Modicon M580 Modicon M340 Modicon Quantum Modicon Premium: Information Disclosure | 7.5 | |
| High | CVE-2018-7854 | Modicon M580 Modicon M340 Modicon Quantum Modicon Premium: Denial of Service | 7.5 | |
| High | CVE-2019-6807 | Modicon M580 Modicon M340 Modicon Quantum Modicon Premium: Denial of Service | 7.5 | |
| High | CVE-2018-7853 | Modicon M580 Modicon M340 Modicon Quantum Modicon Premium: Denial of Service | 7.5 | |
| High | CVE-2019-6809 | Schneider Electric Modicon: Uncaught Exception | 7.5 | |
| High | CVE-2019-6849 | Schneider-Electric Modicon BMENOC 0311 Firmware: Exposure of Sensitive Information to an Unauthorized Actor | 7.5 | |
| High | CVE-2019-6850 | Schneider-Electric Modicon BMENOC 0311 Firmware: Exposure of Sensitive Information to an Unauthorized Actor | 7.5 | |
| High | CVE-2019-6857 | Schneider-Electric 140CPU65150 Firmware: Improper Check for Unusual or Exceptional Conditions | 7.5 | |
| High | CVE-2019-6856 | Schneider-Electric 140CPU65150 Firmware: Improper Check for Unusual or Exceptional Conditions | 7.5 | |
| Medium | CVE-2019-6821 | Schneider-Electric Modicon M580 Firmware: Use of Insufficiently Random Values | 6.5 |