Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
address) when a specific Ethernet frame is received in all versions of: Modicon M100, Modicon M200, Modicon M221, ATV IMC drive controller, Modicon M241, Modicon M251, Modicon M258, Modicon LMC058, Modicon LMC078, PacDrive Eco ,PacDrive Pro, PacDrive Pro2 Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-134-02/
CVE ID: CVE-2019-6821 State: PUBLISHED Published: 2019-05-22T19:42:06 Last Updated: 2024-08-04T20:31:04.471Z Vendors: n/a Products: Modicon Controllers, Modicon M580 firmware versions prior to V2.30, and all firmware versions of Modicon M340, Modicon Premium, Modicon Quantum Problem Types: CWE-330 Description: CWE-330: Use of Insufficiently Random Values vulnerability, which could cause the hijacking of the TCP connection when using Ethernet communication in Modicon M580 firmware versions prior to V2.30, and all firmware versions of Modicon M340, Modicon Premium, Modicon Quantum. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-
antum. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-136-01 - http://www.securityfocus.com/bid/108366 - https://www.schneider-electric.com/en/download/document/SEVD-2019-134-03/
CVE ID: CVE-2019-6822 State: PUBLISHED Published: 2019-07-15T20:46:39 Last Updated: 2024-08-04T20:31:04.201Z Vendors: Zelio Soft Products: Zelio Soft 2 V5.2 and prior Problem Types: CWE-416 Description: A Use After Free: CWE-416 vulnerability exists in Zelio Soft 2, V5.2 and earlier, which could cause remote code execution when opening a specially crafted Zelio Soft 2 project file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/109100 - https://www.zerodayinitiative.com/advisories/ZDI-19-658/ - https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-190-01 - https://www.us-cert.gov/ics/advisories/icsa-19-190-03
CVE ID: CVE-2019-6823 State: PUBLISHED Published: 2019-07-15T20:41:51 Last Updated: 2024-08-04T20:31:04.400Z Vendors: ProClima Products: ProClima all versions prior to version 8.0.0 Problem Types: CWE-94 Description: A CWE-94: Code Injection vulnerability exists in ProClima (all versions prior to version 8.0.0) which could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system in all versions of ProClima prior to version 8.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-162-01/
CVE ID: CVE-2019-6824 State: PUBLISHED Published: 2019-07-15T20:44:14 Last Updated: 2024-08-04T20:31:04.436Z Vendors: ProClima Products: ProClima all versions prior to version 8.0.0 Problem Types: CWE-119 Description: A CWE-119: Buffer Errors vulnerability exists in ProClima (all versions prior to version 8.0.0) which allows an unauthenticated, remote attacker to execute arbitrary code on the targeted system in all versions of ProClima prior to version 8.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-162-01/
CVE ID: CVE-2019-6825 State: PUBLISHED Published: 2019-07-15T20:45:14 Last Updated: 2024-08-04T20:31:04.398Z Vendors: ProClima Products: ProClima all versions prior to version 8.0.0 Problem Types: CWE-427 Description: A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProClima (all versions prior to version 8.0.0) which could allow a malicious DLL file, with the same name of any resident DLLs inside the software installation, to execute arbitrary code in all versions of ProClima prior to version 8.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-162-01/
CVE ID: CVE-2019-6826 State: PUBLISHED Published: 2019-09-17T19:57:55 Last Updated: 2024-08-04T20:31:04.358Z Vendors: Schneider Electric SE Products: SoMachine HVAC Problem Types: CWE-426 Description: A CWE-426: Untrusted Search Path vulnerability exists in SoMachine HVAC v2.4.1 and earlier versions, which could cause arbitrary code execution on the system running SoMachine HVAC when a malicious DLL library is loaded by the product. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-225-04/
CVE ID: CVE-2019-6827 State: PUBLISHED Published: 2019-07-15T20:47:48 Last Updated: 2024-08-04T20:31:04.402Z Vendors: n/a Products: Interactive Graphical SCADA System (IGSS) Version 14 and prior Problem Types: CWE-787 Description: A CWE-787: Out-of-bounds Write vulnerability exists in Interactive Graphical SCADA System (IGSS), Version 14 and prior, which could cause a software crash when data in the mdb database is manipulated. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-190-02 - https://www.zerodayinitiative.com/advisories/ZDI-19-671/
CVE ID: CVE-2019-6828 State: PUBLISHED Published: 2019-09-17T19:59:33 Last Updated: 2024-08-04T20:31:04.247Z Vendors: Schneider Electric SE Products: Modicon M580, Modicon M340, Modicon Premium, Modicon Quantum Problem Types: CWE-248 Description: A CWE-248: Uncaught Exception vulnerability exists Modicon M580 (firmware version prior to V2.90), Modicon M340 (firmware version prior to V3.10), Modicon Premium (all versions), and Modicon Quantum (all versions), which could cause a possible denial of service when reading specific coils and registers in the controller over Modbus. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/docume
. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/
CVE ID: CVE-2019-6829 State: PUBLISHED Published: 2019-09-17T19:44:12 Last Updated: 2024-08-04T20:31:04.339Z Vendors: Schneider Electric SE Products: Modicon M580, Modicon M340 Problem Types: CWE-248 Description: A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware version prior to V2.90) and Modicon M340 (firmware version prior to V3.10), which could cause a possible denial of service when writing to specific memory addresses in the controller over Modbus. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/
CVE ID: CVE-2019-6830 State: PUBLISHED Published: 2019-09-17T19:21:12 Last Updated: 2024-08-04T20:31:04.286Z Vendors: Schneider Electric SE Products: Modicon M580 Problem Types: CWE-248 Description: A CWE-248: Uncaught Exception vulnerability exists IN Modicon M580 all versions prior to V2.80, which could cause a possible denial of service when sending an appropriately timed HTTP request to the controller. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/
CVE ID: CVE-2019-6831 State: PUBLISHED Published: 2019-09-17T19:22:59 Last Updated: 2024-08-04T20:31:04.375Z Vendors: Schneider Electric SE Products: BMXNOR0200H Ethernet / Serial RTU module Problem Types: CWE-754 Description: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module (all firmware versions), which could cause disconnection of active connections when an unusually high number of IEC 60870- 5-104 packets are received by the module on port 2404/TCP. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-225-03/ - https://security.cse.
ntainer: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-225-03/ - https://security.cse.iitk.ac.in/responsible-disclosure
CVE ID: CVE-2019-6832 State: PUBLISHED Published: 2019-09-17T19:31:14 Last Updated: 2024-08-04T20:31:04.434Z Vendors: Schneider Electric SE Products: spaceLYnk, Wiser for KNX Problem Types: CWE-287 Description: A CWE-287: Authentication vulnerability exists in spaceLYnk (all versions before 2.4.0) and Wiser for KNX (all versions before 2.4.0 - formerly known as homeLYnk), which could cause loss of control when an attacker bypasses the authentication. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-225-07/
CVE ID: CVE-2019-6833 State: PUBLISHED Published: 2019-09-17T19:36:57.000Z Last Updated: 2025-09-30T14:36:19.669Z Vendors: Schneider Electric SE Products: Magelis HMI Panels Problem Types: CWE-754 Description: A CWE-754 – Improper Check for Unusual or Exceptional Conditions vulnerability exists in Magelis HMI Panels (all versions of - HMIGTO, HMISTO, XBTGH, HMIGTU, HMIGTUX, HMISCU, HMISTU, XBTGT, XBTGT, HMIGXO, HMIGXU), which could cause a temporary freeze of the HMI when a high rate of frames is received. When the attack stops, the buffered commands are processed by the HMI panel. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.schneider
I panel. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-225-01 - https://security.cse.iitk.ac.in/responsible-disclosure
CVE ID: CVE-2019-6834 State: PUBLISHED Published: 2022-03-28T16:25:19 Last Updated: 2024-08-04T20:31:04.361Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Schneider Electric Products: Software Update (SESU) – SUT Service component Problem Types: CWE-502 Description: A CWE-502: Deserialization of Untrusted Data vulnerability exists which could allow an attacker to execute arbitrary code on the targeted system with SYSTEM privileges when placing a malicious user to be authenticated for this vulnerability to be successfully exploited. Affected Product: Schneider Electric Software Update (SESU) SUT Service component (V2.1.1 to V2.3.0) Additional Analyst Notes: -
Product: Schneider Electric Software Update (SESU) SUT Service component (V2.1.1 to V2.3.0) Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2019-225-06/
CVE ID: CVE-2019-6835 State: PUBLISHED Published: 2019-09-17T19:13:26 Last Updated: 2024-08-04T20:31:04.391Z Vendors: Schneider Electric SE Products: U.motion Server Problem Types: CWE-79 Description: A Cross-Site Scripting (XSS) CWE-79 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow an attacker to inject client-side script when a user visits a web page. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-253-01
CVE ID: CVE-2019-6836 State: PUBLISHED Published: 2019-09-17T19:14:36 Last Updated: 2024-08-04T20:31:04.434Z Vendors: n/a Products: U.motion Servers (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, and MEG6260-0415 - U.motion KNX Server Plus, Touch 1) Problem Types: CWE-863 Description: A CWE-863: Incorrect Authorization vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow the file system to access the wrong file. Additional Analy
0415 - U.motion KNX Server Plus, Touch 15), which could allow the file system to access the wrong file. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2019-253-01/
CVE ID: CVE-2019-6837 State: PUBLISHED Published: 2019-09-17T19:15:34 Last Updated: 2024-08-04T20:31:04.145Z Vendors: CVE-2019-6837 Products: U.motion Server Problem Types: CWE-918 Description: A Server-Side Request Forgery (SSRF): CWE-918 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could cause server configuration data to be exposed when an attacker modifies a URL. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-253-01
CVE ID: CVE-2019-6838 State: PUBLISHED Published: 2019-09-17T19:16:38 Last Updated: 2024-08-04T20:31:04.356Z Vendors: n/a Products: U.motion Servers (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, and MEG6260-0415 - U.motion KNX Server Plus, Touch 1) Problem Types: CWE-863 Description: A CWE-863: Incorrect Authorization vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow a user with low privileges to delete a critical file. Addi
0415 - U.motion KNX Server Plus, Touch 15), which could allow a user with low privileges to delete a critical file. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2019-253-01/
CVE ID: CVE-2019-6839 State: PUBLISHED Published: 2019-09-17T19:17:33 Last Updated: 2024-08-04T20:31:04.388Z Vendors: n/a Products: U.motion Servers (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, and MEG6260-0415 - U.motion KNX Server Plus, Touch 1) Problem Types: CWE-434 Description: A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow a user with low privileges to uplo
Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow a user with low privileges to upload a rogue file. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2019-253-01/
CVE ID: CVE-2019-6840 State: PUBLISHED Published: 2019-09-17T19:19:36 Last Updated: 2024-08-04T20:31:04.390Z Vendors: Schneider Electric SE Products: U.motion Server Problem Types: CWE-134 Description: A Format String: CWE-134 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow an attacker to send a crafted message to the target server, thereby causing arbitrary commands to be executed. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/ww/en/download/document
itional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-253-01
CVE ID: CVE-2019-6841 State: PUBLISHED Published: 2019-10-29T14:46:24 Last Updated: 2024-08-04T20:31:04.395Z Vendors: n/a Products: Modicon M580, Modicon M340, and Modicon BMxCRA / 140CRA modules (see notification for version info) Problem Types: CWE-755 Description: A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 with firmware (version prior to V3.10), Modicon M340 (all firmware versions), and Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause a Denial of Service attack on the PLC when upgrading the firmware with no firmware image inside the package using FTP protocol. Additional Analyst Notes: - CVE Program Container: Re
ware with no firmware image inside the package using FTP protocol. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2019-281-02/
CVE ID: CVE-2019-6842 State: PUBLISHED Published: 2019-10-29T14:47:16 Last Updated: 2024-08-04T20:31:04.358Z Vendors: n/a Products: Modicon M580, Modicon M340, and Modicon BMxCRA / 140CRA modules (see notification for version info) Problem Types: CWE-755 Description: A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause a Denial of Service attack on the PLC when upgrading the firmware with a missing web server image inside the package using FTP protocol. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEV
rotocol. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2019-281-02/
CVE ID: CVE-2019-6843 State: PUBLISHED Published: 2019-10-29T14:48:04 Last Updated: 2024-08-04T20:31:04.371Z Vendors: n/a Products: Modicon M580, Modicon M340, and Modicon BMxCRA / 140CRA modules (see notification for version info) Problem Types: CWE-755 Description: A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 with firmware (version prior to V3.10), Modicon M340 (all firmware versions), and Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause a Denial of Service attack on the PLC when upgrading the controller with an empty firmware package using FTP protocol. Additional Analyst Notes: - CVE Program Container: References:
roller with an empty firmware package using FTP protocol. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2019-281-02/
CVE ID: CVE-2019-6844 State: PUBLISHED Published: 2019-10-29T14:48:44 Last Updated: 2024-08-04T20:31:04.430Z Vendors: n/a Products: Modicon M580, Modicon M340, and Modicon BMxCRA / 140CRA modules (see notification for version info) Problem Types: CWE-755 Description: A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause a Denial of Service atack on the PLC when upgrading the controller with a firmware package containing an invalid web server image using FTP protocol. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download
e using FTP protocol. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2019-281-02/
CVE ID: CVE-2019-6845 State: PUBLISHED Published: 2019-10-29T14:49:49 Last Updated: 2024-08-04T20:31:04.391Z Vendors: n/a Products: Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (all firmware versions) Problem Types: CWE-319 Description: A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (all firmware versions), which could cause the disclosure of information when transferring applications to the controller using Modbus TCP protocol. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-281-03
CVE ID: CVE-2019-6846 State: PUBLISHED Published: 2019-10-29T14:51:31 Last Updated: 2024-08-04T20:31:04.392Z Vendors: n/a Products: Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions) Problem Types: CWE-319 Description: A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause information disclosure when using the FTP protocol. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-281-02
CVE ID: CVE-2019-6847 State: PUBLISHED Published: 2019-10-29T14:52:24 Last Updated: 2024-08-04T20:31:04.413Z Vendors: n/a Products: Modicon M580, Modicon M340, and Modicon BMxCRA / 140CRA modules (see notification for version info) Problem Types: CWE-755 Description: A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause a Denial of Service attack on the FTP service when upgrading the firmware with a version incompatible with the application in the controller using FTP protocol. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/
e controller using FTP protocol. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2019-281-02/
CVE ID: CVE-2019-6848 State: PUBLISHED Published: 2019-10-29T14:53:10 Last Updated: 2024-08-04T20:31:04.396Z Vendors: n/a Products: Modicon M580 CPU (BMEx58*) and Modicon M580 communication module (BMENOC0311, BMENOC0321) (see notification for version info) Problem Types: CWE-755 Description: A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 CPU (BMEx58*) and Modicon M580 communication module (BMENOC0311, BMENOC0321) (see notification for version info), which could cause a Denial of Service attack on the PLC when sending specific data on the REST API of the controller/communication module. Additional Analyst Notes: - CVE Program Container: References
ta on the REST API of the controller/communication module. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2019-281-04/
CVE ID: CVE-2019-6849 State: PUBLISHED Published: 2019-10-29T14:53:44 Last Updated: 2024-08-04T20:31:04.468Z Vendors: n/a Products: Modicon M580, Modicon BMENOC 0311, Modicon BMENOC 0321 Problem Types: CWE-200 Description: A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure of sensitive information when using specific Modbus services provided by the REST API of the controller/communication module. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-281-04
CVE ID: CVE-2019-6850 State: PUBLISHED Published: 2019-10-29T14:54:39 Last Updated: 2024-08-04T20:31:04.356Z Vendors: n/a Products: Modicon M580, Modicon BMENOC 0311, Modicon BMENOC 0321 Problem Types: CWE-200 Description: A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure of sensitive information when reading specific registers with the REST API of the controller/communication module. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-281-04
CVE ID: CVE-2019-6851 State: PUBLISHED Published: 2019-10-29T14:55:35 Last Updated: 2024-08-04T20:31:04.388Z Vendors: n/a Products: Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (all firmware versions) Problem Types: CWE-538 Description: A CWE-538: File and Directory Information Exposure vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (all firmware versions), which could cause the disclosure of information from the controller when using TFTP protocol. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-281-01