alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2020-7502 (published 2020-06-16)
A CWE-787: Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller (Firmware version 4.3 and prior), which may cause a Denial of Service when specific TCP/IP crafted packets are sent to the Modicon M218 Logic Controller.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-787
Affected vendors: schneider-electric
Affected products: modicon_m218, modicon_m218_firmware
CVE-2020-7503 (published 2020-06-16)
A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to execute malicious commands on behalf of a legitimate user when xsrf-token data is intercepted.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-352
Affected vendors: schneider-electric
Affected products: easergy_t300, easergy_t300_firmware
CVE-2020-7504 (published 2020-06-16)
A CWE-20: Improper Input Validation vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to disable the webserver service on the device when specially crafted network packets are sent.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Weakness: CWE-20
Affected vendors: schneider-electric
Affected products: easergy_t300, easergy_t300_firmware
CVE-2020-7505 (published 2020-06-16)
A CWE-494 Download of Code Without Integrity Check vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to inject data with dangerous content into the firmware and execute arbitrary code on the system.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-494
Affected vendors: schneider-electric
Affected products: easergy_t300, easergy_t300_firmware
CVE-2020-7506 (published 2020-06-16)
A CWE-200: Information Exposure vulnerability exists in Easergy T300, Firmware V1.5.2 and prior, which could allow an attacker to pack or unpack the archive with the firmware for the controller and modules using the usual tar archiver resulting in an information exposure.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: schneider-electric
Affected products: easergy_t300, easergy_t300_firmware
CVE-2020-7507 (published 2020-06-16)
A CWE-400: Uncontrolled Resource Consumption vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to login multiple times resulting in a denial of service.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-400
Affected vendors: schneider-electric
Affected products: easergy_t300, easergy_t300_firmware
CVE-2020-7508 (published 2020-06-16)
A CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to gain full access by brute force.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-307
Affected vendors: schneider-electric
Affected products: easergy_t300, easergy_t300_firmware
CVE-2020-7509 (published 2020-06-16)
A CWE-269: Improper privilege management (write) vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to elevate their privileges and delete files.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-269
Affected vendors: schneider-electric
Affected products: easergy_t300, easergy_t300_firmware
CVE-2020-7510 (published 2020-06-16)
A CWE-200: Information Exposure vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow attacker to obtain private keys.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: schneider-electric
Affected products: easergy_t300, easergy_t300_firmware
CVE-2020-7511 (published 2020-06-16)
A CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to acquire a password by brute force.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-327
Affected vendors: schneider-electric
Affected products: easergy_t300, easergy_t300_firmware
CVE-2020-7512 (published 2020-06-16)
A CWE-1103: Use of Platform-Dependent Third Party Components with vulnerabilities vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to exploit the component.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-1103
Affected vendors: schneider-electric
Affected products: easergy_t300, easergy_t300_firmware
CVE-2020-7513 (published 2020-06-16)
A CWE-312: Cleartext Storage of Sensitive Information vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to intercept traffic and read configuration data.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-312
Affected vendors: schneider-electric
Affected products: easergy_t300, easergy_t300_firmware
CVE-2020-7514 (published 2020-07-23)
A CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in Easergy Builder (Version 1.4.7.2 and older) which could allow an attacker access to the authorization credentials for a device and gain full access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-327
Affected vendors: schneider-electric
Affected products: easergy_builder
CVE-2020-7515 (published 2020-07-23)
A CWE-321: Use of hard-coded cryptographic key stored in cleartext vulnerability exists in Easergy Builder V1.4.7.2 and prior which could allow an attacker to decrypt a password.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-798
Affected vendors: schneider-electric
Affected products: easergy_builder
CVE-2020-7516 (published 2020-07-23)
A CWE-316: Cleartext Storage of Sensitive Information in Memory vulnerability exists in Easergy Builder V1.4.7.2 and prior which could allow an attacker access to login credentials.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-312
Affected vendors: schneider-electric
Affected products: easergy_builder
CVE-2020-7517 (published 2020-07-23)
A CWE-312: Cleartext Storage of Sensitive Information vulnerability exists in Easergy Builder (Version 1.4.7.2 and older) which could allow an attacker to read user credentials.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-312
Affected vendors: schneider-electric
Affected products: easergy_builder
CVE-2020-7518 (published 2020-07-23)
A CWE-20: Improper input validation vulnerability exists in Easergy Builder (Version 1.4.7.2 and older) which could allow an attacker to modify project configuration files.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-20
Affected vendors: schneider-electric
Affected products: easergy_builder
CVE-2020-7519 (published 2020-07-23)
A CWE-521: Weak Password Requirements vulnerability exists in Easergy Builder (Version 1.4.7.2 and older) which could allow an attacker to compromise a user account.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-521
Affected vendors: schneider-electric
Affected products: easergy_builder
CVE-2020-7520 (published 2020-07-23)
A CWE-601: URL Redirection to Untrusted Site ('Open Redirect') vulnerability exists in Schneider Electric Software Update (SESU), V2.4.0 and prior, which could cause execution of malicious code on the victim's machine. In order to exploit this vulnerability, an attacker requires privileged access on the engineering workstation to modify a Windows registry key which would divert all traffic updates to go through a server in the attacker's possession. A man-in-the-middle attack is then used to complete the exploit.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-601
Affected vendors: schneider-electric
Affected products: software_update_utility
CVE-2020-7521 (published 2020-08-31)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in SFAPV9601 - APC Easy UPS On-Line Software (V2.0 and earlier) when accessing a vulnerable method of `FileUploadServlet` which may lead to uploading executable files to non-specified directories.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-22
Affected vendors: schneider-electric
Affected products: apc_easy_ups_online_software
CVE-2020-7522 (published 2020-08-31)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in SFAPV9601 - APC Easy UPS On-Line Software (V2.0 and earlier) when accessing a vulnerable method of `SoundUploadServlet` which may lead to uploading executable files to non-specified directories.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-22
Affected vendors: schneider-electric
Affected products: apc_easy_ups_online_software
CVE-2020-7523 (published 2020-08-31)
Improper Privilege Management vulnerability exists in Schneider Electric Modbus Serial Driver (see security notification for versions) which could cause local privilege escalation when the Modbus Serial Driver service is invoked. The driver does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-269
Affected vendors: schneider-electric
Affected products: modbus_driver_suite, modbus_serial_driver
CVE-2020-7524 (published 2020-08-31)
Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller (V5.0.0.7 and prior) which could cause Denial of Service when sending specific crafted IPV4 packet to the controller: Sending a specific IPv4 protocol package to Schneider Electric Modicon M218 Logic Controller can cause IPv4 devices to go down. The device does not work properly and must be powered back on to return to normal.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-787
Affected vendors: schneider-electric
Affected products: modicon_m218, modicon_m218_firmware
CVE-2020-7525 (published 2020-08-31)
Improper Restriction of Excessive Authentication Attempts vulnerability exists in all hardware versions of spaceLYnk and Wiser for KNX (formerly homeLYnk) which could allow an attacker to guess a password when brute force is used.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-307
Affected vendors: schneider-electric
Affected products: spacelynk, spacelynk_firmware, wiser_for_knx, wiser_for_knx_firmware
CVE-2020-7526 (published 2020-08-31)
Improper Input Validation vulnerability exists in PowerChute Business Edition (software V9.0.x and earlier) which could cause remote code execution when a script is executed during a shutdown event.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: apc
Affected products: powerchute
CVE-2020-7527 (published 2020-08-31)
Incorrect Default Permission vulnerability exists in SoMove (V2.8.1) and prior which could cause elevation of privilege and provide full access control to local system users to SoMove component and services when a SoMove installer script is launched.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-276
Affected vendors: schneider-electric
Affected products: somove
CVE-2020-7528 (published 2020-09-16)
A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which could allow arbitrary code execution when an attacker builds a custom .PRJ file containing a malicious serialized buffer.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: schneider-electric
Affected products: scadapack_7x_remote_connect
CVE-2020-7529 (published 2020-09-16)
A CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Transversal') vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allows an attacker to place content in any unprotected folder on the target system using a crafted .RCZ file.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Weakness: CWE-22
Affected vendors: schneider-electric
Affected products: scadapack_7x_remote_connect
CVE-2020-7530 (published 2020-09-16)
A CWE-285 Improper Authorization vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allows improper access to executable code folders.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-285
Affected vendors: schneider-electric
Affected products: scadapack_7x_remote_connect
CVE-2020-7531 (published 2020-09-16)
A CWE-284 Improper Access Control vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allows an attacker to place executables in a specific folder and run code whenever RemoteConnect is executed by the user.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-284
Affected vendors: schneider-electric
Affected products: scadapack_7x_remote_connect
CVE-2020-7532 (published 2020-09-16)
A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack x70 Security Administrator (V1.2.0 and prior) which could allow arbitrary code execution when an attacker builds a custom .SDB file containing a malicious serialized buffer.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: schneider-electric
Affected products: scadapack_x70_security_administrator
CVE-2020-7533 (published 2020-12-01)
CWE-287: Improper Authentication vulnerability exists which could cause the execution of
commands on the webserver without authentication when sending specially crafted HTTP
requests.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-287
Affected vendors: schneider-electric
Affected products: 140cpu65260, 140cpu65260_firmware, 140noc77101, 140noc77101_firmware, 140noc78000, 140noc78000_firmware, 140noe77111, 140noe77111_firmware, bmxnoc0401, bmxnoc0401_firmware, bmxnoe0100, bmxnoe0100_firmware, bmxnoe0110, bmxnoe0110_firmware, modicon_m340_bmxp341000, modicon_m340_bmxp341000_firmware, modicon_m340_bmxp342000, modicon_m340_bmxp342000_firmware, modicon_m340_bmxp3420102, modicon_m340_bmxp3420102_firmware, modicon_m340_bmxp3420302, modicon_m340_bmxp3420302_firmware, tsxety4103, tsxety4103_firmware, tsxety5103
CVE-2020-7534 (published 2022-02-04)
A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists on the web server used, that could cause a leak of sensitive data or unauthorized actions on the web server during the time the user is logged in. Affected Products: Modicon M340 CPUs: BMXP34 (All Versions), Modicon Quantum CPUs with integrated Ethernet (Copro): 140CPU65 (All Versions), Modicon Premium CPUs with integrated Ethernet (Copro): TSXP57 (All Versions), Modicon M340 ethernet modules: (BMXNOC0401, BMXNOE01, BMXNOR0200H) (All Versions), Modicon Quantum and Premium factory cast communication modules: (140NOE77111, 140NOC78*00, TSXETY5103, TSXETY4103) (All Versions)
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-352
Affected vendors: schneider-electric
Affected products: 140cpu65, 140cpu65_firmware, 140noc78000, 140noc78000_firmware, 140noe77111, 140noe77111_firmware, bmxnoc0401, bmxnoc0401_firmware, bmxnoe01, bmxnoe01_firmware, bmxnor0200h, bmxnor0200h_firmware, modicon_m340_bmxp342020, modicon_m340_bmxp342020_firmware, tsxety4103, tsxety4103_firmware, tsxety5103, tsxety5103_firmware, tsxp57, tsxp57_firmware
CVE-2020-7535 (published 2020-12-11)
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal' Vulnerability Type) vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause disclosure of information when sending a specially crafted request to the controller over HTTP.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: schneider-electric
Affected products: 140cpu65150, 140cpu65150_firmware, 140cpu65160, 140cpu65160_firmware, 140noc77101, 140noc77101_firmware, 140noc78000, 140noc78000_firmware, 140noc78100, 140noc78100_firmware, 140noe77101, 140noe77101_firmware, 140noe77111, 140noe77111_firmware, bmxnoe0100, bmxnoe0100_firmware, bmxnoe0110, bmxnoe0110_firmware, modicon_m340_bmxp341000, modicon_m340_bmxp341000_firmware, modicon_m340_bmxp342000, modicon_m340_bmxp342000_firmware, modicon_m340_bmxp3420102, modicon_m340_bmxp3420102_firmware, modicon_m340_bmxp3420102cl
CVE-2020-7536 (published 2020-12-11)
A CWE-754:Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M340 CPUs (BMXP34* versions prior to V3.30) Modicon M340 Communication Ethernet modules (BMXNOE0100 (H) versions prior to V3.4 BMXNOE0110 (H) versions prior to V6.6 BMXNOR0200H all versions), that could cause the device to be unreachable when modifying network parameters over SNMP.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-754
Affected vendors: schneider-electric
Affected products: bmxnoe0100, bmxnoe0100_firmware, bmxnoe0110, bmxnoe0110_firmware, bmxnor0200h, bmxnor0200h_firmware, modicon_m340_bmxp341000, modicon_m340_bmxp341000_firmware, modicon_m340_bmxp342000, modicon_m340_bmxp342000_firmware, modicon_m340_bmxp3420102, modicon_m340_bmxp3420102_firmware, modicon_m340_bmxp3420102cl, modicon_m340_bmxp3420102cl_firmware, modicon_m340_bmxp342020, modicon_m340_bmxp342020_firmware, modicon_m340_bmxp3420302, modicon_m340_bmxp3420302_firmware, modicon_m340_bmxp3420302cl, modicon_m340_bmxp3420302cl_firmware
CVE-2020-7537 (published 2020-12-11)
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions), that could cause denial of service when a specially crafted Read Physical Memory request over Modbus is sent to the controller.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-754
Affected vendors: schneider-electric
Affected products: modicon_m340_bmxp341000, modicon_m340_bmxp341000_firmware, modicon_m340_bmxp342000, modicon_m340_bmxp342000_firmware, modicon_m340_bmxp3420102, modicon_m340_bmxp3420102_firmware, modicon_m340_bmxp3420102cl, modicon_m340_bmxp3420102cl_firmware, modicon_m340_bmxp342020, modicon_m340_bmxp342020_firmware, modicon_m340_bmxp3420302, modicon_m340_bmxp3420302_firmware, modicon_m340_bmxp3420302cl, modicon_m340_bmxp3420302cl_firmware, modicon_m580_bmep581020, modicon_m580_bmep581020_firmware, modicon_m580_bmep582020, modicon_m580_bmep582020_firmware, modicon_m580_bmep582040, modicon_m580_bmep582040_firmware, modicon_m580_bmep583020, modicon_m580_bmep583020_firmware, modicon_m580_bmep583040, modicon_m580_bmep583040_firmware, modicon_m580_bmep584020
CVE-2020-7538 (published 2020-11-19)
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause a crash of the PLC simulator present in EcoStruxureª Control Expert software when receiving a specially crafted request over Modbus.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-754
Affected vendors: schneider-electric
Affected products: ecostruxure_control_expert
CVE-2020-7539 (published 2020-12-11)
A CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause a denial of service vulnerability when a specially crafted packet is sent to the controller over HTTP.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-754
Affected vendors: schneider-electric
Affected products: 140cpu65150, 140cpu65150_firmware, 140noc77101, 140noc77101_firmware, 140noc78000, 140noc78000_firmware, 140noc78100, 140noc78100_firmware, 140noe77111, 140noe77111_firmware, bmxnoc0401, bmxnoc0401_firmware, bmxnoe0100, bmxnoe0100_firmware, bmxnoe0110, bmxnoe0110_firmware, modicon_m340_bmxp341000, modicon_m340_bmxp341000_firmware, modicon_m340_bmxp342000, modicon_m340_bmxp342000_firmware, modicon_m340_bmxp3420102, modicon_m340_bmxp3420102_firmware, modicon_m340_bmxp3420102cl, modicon_m340_bmxp3420102cl_firmware, modicon_m340_bmxp342020
CVE-2020-7540 (published 2020-12-11)
A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause unauthenticated command execution in the controller when sending special HTTP requests.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-306
Affected vendors: schneider-electric
Affected products: 140cpu65150, 140cpu65150_firmware, 140cpu65160, 140cpu65160_firmware, 140noc77101, 140noc77101_firmware, 140noc78000, 140noc78000_firmware, 140noc78100, 140noc78100_firmware, 140noe77101, 140noe77101_firmware, 140noe77111, 140noe77111_firmware, bmxnoc0401, bmxnoc0401_firmware, bmxnoe0100, bmxnoe0100_firmware, bmxnoe0110, bmxnoe0110_firmware, bmxnor200h, bmxnor200h_firmware, modicon_m340_bmxp341000, modicon_m340_bmxp341000_firmware, modicon_m340_bmxp342000
CVE-2020-7541 (published 2020-12-11)
A CWE-425: Direct Request ('Forced Browsing') vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause disclosure of sensitive data when sending a specially crafted request to the controller over HTTP.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-425
Affected vendors: schneider-electric
Affected products: 140cpu65150, 140cpu65150_firmware, 140noc77101, 140noc77101_firmware, 140noc78000, 140noc78000_firmware, 140noc78100, 140noc78100_firmware, 140noe77111, 140noe77111_firmware, bmxnoc0401, bmxnoc0401_firmware, bmxnoe0100, bmxnoe0100_firmware, bmxnoe0110, bmxnoe0110_firmware, modicon_m340_bmxp341000, modicon_m340_bmxp341000_firmware, modicon_m340_bmxp342000, modicon_m340_bmxp342000_firmware, modicon_m340_bmxp3420102, modicon_m340_bmxp3420102_firmware, modicon_m340_bmxp3420102cl, modicon_m340_bmxp3420102cl_firmware, modicon_m340_bmxp342020
CVE-2020-7542 (published 2020-12-11)
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions), that could cause denial of service when a specially crafted Read Physical Memory request over Modbus is sent to the controller.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-754
Affected vendors: schneider-electric
Affected products: 140cpu65150, 140cpu65150_firmware, modicon_m340_bmxp341000, modicon_m340_bmxp341000_firmware, modicon_m340_bmxp342000, modicon_m340_bmxp342000_firmware, modicon_m340_bmxp3420102, modicon_m340_bmxp3420102_firmware, modicon_m340_bmxp3420102cl, modicon_m340_bmxp3420102cl_firmware, modicon_m340_bmxp342020, modicon_m340_bmxp342020_firmware, modicon_m340_bmxp3420302, modicon_m340_bmxp3420302_firmware, modicon_m340_bmxp3420302cl, modicon_m340_bmxp3420302cl_firmware, modicon_m580_bmep581020, modicon_m580_bmep581020_firmware, modicon_m580_bmep582020, modicon_m580_bmep582020_firmware, modicon_m580_bmep582040, modicon_m580_bmep582040_firmware, modicon_m580_bmep583020, modicon_m580_bmep583020_firmware, modicon_m580_bmep583040
CVE-2020-7543 (published 2020-12-11)
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions), that could cause denial of service when a specially crafted Read Physical Memory request over Modbus is sent to the controller.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-754
Affected vendors: schneider-electric
Affected products: modicon_m340_bmxp341000, modicon_m340_bmxp341000_firmware, modicon_m340_bmxp342000, modicon_m340_bmxp342000_firmware, modicon_m340_bmxp3420102, modicon_m340_bmxp3420102_firmware, modicon_m340_bmxp3420102cl, modicon_m340_bmxp3420102cl_firmware, modicon_m340_bmxp342020, modicon_m340_bmxp342020_firmware, modicon_m340_bmxp3420302, modicon_m340_bmxp3420302_firmware, modicon_m340_bmxp3420302cl, modicon_m340_bmxp3420302cl_firmware, modicon_m580_bmep581020, modicon_m580_bmep581020_firmware, modicon_m580_bmep582020, modicon_m580_bmep582020_firmware, modicon_m580_bmep582040, modicon_m580_bmep582040_firmware, modicon_m580_bmep583020, modicon_m580_bmep583020_firmware, modicon_m580_bmep583040, modicon_m580_bmep583040_firmware, modicon_m580_bmep584020
CVE-2020-7544 (published 2020-11-19)
A CWE-269 Improper Privilege Management vulnerability exists in EcoStruxureª Operator Terminal Expert runtime (Vijeo XD) that could cause privilege escalation on the workstation when interacting directly with a driver installed by the runtime software of EcoStruxureª Operator Terminal Expert.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-269
Affected vendors: schneider-electric
Affected products: operator_terminal_expert_runtime
CVE-2020-7545 (published 2020-12-01)
A CWE-284:Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for version information) that could allow for arbitrary code execution on the server when an authorized user access an affected webpage.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-284
Affected vendors: schneider-electric
Affected products: ecostruxure_energy_expert, ecostruxure_power_monitoring_expert, power_manager, powerscada_expert_with_advanced_reporting_and_dashboards, powerscada_operation_with_advanced_reporting_and_dashboards
CVE-2020-7546 (published 2020-12-01)
A CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for version information) that could allow an attacker to perform actions on behalf of the authorized user when accessing an affected webpage.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: schneider-electric
Affected products: ecostruxure_energy_expert, ecostruxure_power_monitoring_expert, power_manager, powerscada_expert_with_advanced_reporting_and_dashboards, powerscada_operation_with_advanced_reporting_and_dashboards
CVE-2020-7547 (published 2020-12-01)
A CWE-284: Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for version information) that could allow a user the ability to perform actions via the web interface at a higher privilege level.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-284
Affected vendors: schneider-electric
Affected products: ecostruxure_energy_expert, ecostruxure_power_monitoring_expert, power_manager, powerscada_expert_with_advanced_reporting_and_dashboards, powerscada_operation_with_advanced_reporting_and_dashboards
CVE-2020-7548 (published 2020-12-01)
A CWE-330 - Use of Insufficiently Random Values vulnerability exists in Smartlink, PowerTag, and Wiser Series Gateways (see security notification for version information) that could allow unauthorized users to login.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-330
Affected vendors: schneider-electric
Affected products: acti9_powertag_link, acti9_powertag_link_firmware, acti9_powertag_link_hd, acti9_powertag_link_hd_firmware, acti9_smartlink_el_b, acti9_smartlink_el_b_firmware, acti9_smartlink_si_b, acti9_smartlink_si_b_firmware, acti9_smartlink_si_d, acti9_smartlink_si_d_firmware, wiser_energy, wiser_energy_firmware, wiser_link, wiser_link_firmware
CVE-2020-7549 (published 2020-12-11)
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause denial of HTTP and FTP services when a series of specially crafted requests is sent to the controller over HTTP.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Weakness: CWE-754
Affected vendors: schneider-electric
Affected products: 140cpu65150, 140cpu65150_firmware, 140noc78000, 140noc78000_firmware, 140noc78100, 140noc78100_firmware, 140noe77111, 140noe77111_firmware, bmxnoc0401, bmxnoc0401_firmware, bmxnoe0100, bmxnoe0100_firmware, bmxnoe0110, bmxnoe0110_firmware, modicon_m340_bmxp341000, modicon_m340_bmxp341000_firmware, modicon_m340_bmxp342000, modicon_m340_bmxp342000_firmware, modicon_m340_bmxp3420102, modicon_m340_bmxp3420102_firmware, modicon_m340_bmxp3420102cl, modicon_m340_bmxp3420102cl_firmware, modicon_m340_bmxp342020, modicon_m340_bmxp342020_firmware, modicon_m340_bmxp3420302
CVE-2020-7550 (published 2020-11-19)
A CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 and prior that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: schneider-electric
Affected products: interactive_graphical_scada_system
CVE-2020-7551 (published 2020-11-19)
A CWE-787: Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247, that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: schneider-electric
Affected products: interactive_graphical_scada_system
CVE-2020-7552 (published 2020-11-19)
A CWE-787: Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247, that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: schneider-electric
Affected products: interactive_graphical_scada_system
CVE-2020-7553 (published 2020-11-19)
A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: schneider-electric
Affected products: interactive_graphical_scada_system
CVE-2020-7554 (published 2020-11-19)
A CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: schneider-electric
Affected products: interactive_graphical_scada_system
CVE-2020-7555 (published 2020-11-19)
A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: schneider-electric
Affected products: interactive_graphical_scada_system
CVE-2020-7556 (published 2020-11-19)
A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: schneider-electric
Affected products: interactive_graphical_scada_system
CVE-2020-7557 (published 2020-11-19)
A CWE-125 Out-of-bounds Read vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-125
Affected vendors: schneider-electric
Affected products: interactive_graphical_scada_system
CVE-2020-7558 (published 2020-11-19)
A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: schneider-electric
Affected products: interactive_graphical_scada_system
CVE-2020-7559 (published 2020-11-19)
A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause a crash of the PLC simulator present in EcoStruxureª Control Expert software when receiving a specially crafted request over Modbus.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-120
Affected vendors: schneider-electric
Affected products: ecostruxure_control_expert
CVE-2020-7560 (published 2020-12-11)
A CWE-123: Write-what-where Condition vulnerability exists in EcoStruxure™ Control Expert (all versions) and Unity Pro (former name of EcoStruxure™ Control Expert) (all versions), that could cause a crash of the software or unexpected code execution when opening a malicious file in EcoStruxure™ Control Expert software.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
Weakness: CWE-123
Affected vendors: schneider-electric
Affected products: ecostruxure_control_expert, unity_pro
CVE-2020-7561 (published 2020-11-19)
A CWE-306: Missing Authentication for Critical Function vulnerability exists in Easergy T300 (with firmware 2.7 and older) that could cause a wide range of problems, including information exposure, denial of service, and command execution when access to a resource from an attacker is not restricted or incorrectly restricted.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-284
Affected vendors: schneider-electric
Affected products: easergy_t300, easergy_t300_firmware
CVE-2020-7562 (published 2020-11-18)
A CWE-125: Out-of-Bounds Read vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause a segmentation fault or a buffer overflow when uploading a specially crafted file on the controller over FTP.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-125
Affected vendors: schneider-electric
Affected products: modicon_m340_bmx_noc_0401, modicon_m340_bmx_noc_0401_firmware, modicon_m340_bmx_noe_0100, modicon_m340_bmx_noe_0100_firmware, modicon_m340_bmx_noe_0100h, modicon_m340_bmx_noe_0100h_firmware, modicon_m340_bmx_noe_0110, modicon_m340_bmx_noe_0110_firmware, modicon_m340_bmx_noe_0110h, modicon_m340_bmx_noe_0110h_firmware, modicon_m340_bmx_nor_0200h, modicon_m340_bmx_nor_0200h_firmware, modicon_m340_bmx_p34-2010, modicon_m340_bmx_p34-2010_firmware, modicon_m340_bmx_p34-2030, modicon_m340_bmx_p34-2030_firmware, modicon_quantum_140cpu65150, modicon_quantum_140cpu65150_firmware, modicon_quantum_140cpu65150c, modicon_quantum_140cpu65150c_firmware, modicon_quantum_140cpu65160, modicon_quantum_140cpu65160_firmware, modicon_quantum_140cpu65160c, modicon_quantum_140cpu65160c_firmware, modicon_quantum_140noc78100
CVE-2020-7563 (published 2020-11-18)
A CWE-787: Out-of-bounds Write vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause corruption of data, a crash, or code execution when uploading a specially crafted file on the controller over FTP.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: schneider-electric
Affected products: modicon_m340_bmx_noc_0401, modicon_m340_bmx_noc_0401_firmware, modicon_m340_bmx_noe_0100, modicon_m340_bmx_noe_0100_firmware, modicon_m340_bmx_noe_0100h, modicon_m340_bmx_noe_0100h_firmware, modicon_m340_bmx_noe_0110, modicon_m340_bmx_noe_0110_firmware, modicon_m340_bmx_noe_0110h, modicon_m340_bmx_noe_0110h_firmware, modicon_m340_bmx_nor_0200h, modicon_m340_bmx_nor_0200h_firmware, modicon_m340_bmx_p34-2010, modicon_m340_bmx_p34-2010_firmware, modicon_m340_bmx_p34-2030, modicon_m340_bmx_p34-2030_firmware, modicon_quantum_140cpu65150, modicon_quantum_140cpu65150_firmware, modicon_quantum_140cpu65150c, modicon_quantum_140cpu65150c_firmware, modicon_quantum_140cpu65160, modicon_quantum_140cpu65160_firmware, modicon_quantum_140cpu65160c, modicon_quantum_140cpu65160c_firmware, modicon_quantum_140noc78100
CVE-2020-7564 (published 2020-11-18)
A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause write access and the execution of commands when uploading a specially crafted file on the controller over FTP.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: schneider-electric
Affected products: modicon_m340_bmx_noc_0401, modicon_m340_bmx_noc_0401_firmware, modicon_m340_bmx_noe_0100, modicon_m340_bmx_noe_0100_firmware, modicon_m340_bmx_noe_0100h, modicon_m340_bmx_noe_0100h_firmware, modicon_m340_bmx_noe_0110, modicon_m340_bmx_noe_0110_firmware, modicon_m340_bmx_noe_0110h, modicon_m340_bmx_noe_0110h_firmware, modicon_m340_bmx_nor_0200h, modicon_m340_bmx_nor_0200h_firmware, modicon_m340_bmx_p34-2010, modicon_m340_bmx_p34-2010_firmware, modicon_m340_bmx_p34-2030, modicon_m340_bmx_p34-2030_firmware, modicon_quantum_140cpu65150, modicon_quantum_140cpu65150_firmware, modicon_quantum_140cpu65150c, modicon_quantum_140cpu65150c_firmware, modicon_quantum_140cpu65160, modicon_quantum_140cpu65160_firmware, modicon_quantum_140cpu65160c, modicon_quantum_140cpu65160c_firmware, modicon_quantum_140noc78100
CVE-2020-7565 (published 2020-11-19)
A CWE-326: Inadequate Encryption Strength vulnerability exists in Modicon M221 (all references, all versions) that could allow the attacker to break the encryption key when the attacker has captured the traffic between EcoStruxure Machine - Basic software and Modicon M221 controller.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N)
Weakness: CWE-326
Affected vendors: schneider-electric
Affected products: modicon_m221, modicon_m221_firmware
CVE-2020-7566 (published 2020-11-19)
A CWE-334: Small Space of Random Values vulnerability exists in Modicon M221 (all references, all versions) that could allow the attacker to break the encryption keys when the attacker has captured the traffic between EcoStruxure Machine - Basic software and Modicon M221 controller.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N)
Weakness: CWE-334
Affected vendors: schneider-electric
Affected products: modicon_m221, modicon_m221_firmware
CVE-2020-7567 (published 2020-11-19)
A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Modicon M221 (all references, all versions) that could allow the attacker to find the password hash when the attacker has captured the traffic between EcoStruxure Machine - Basic software and Modicon M221 controller and broke the encryption keys.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Weakness: CWE-311
Affected vendors: schneider-electric
Affected products: modicon_m221, modicon_m221_firmware
CVE-2020-7568 (published 2020-11-19)
A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Modicon M221 (all references, all versions) that could allow non sensitive information disclosure when the attacker has captured the traffic between EcoStruxure Machine - Basic software and Modicon M221 controller.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-200
Affected vendors: schneider-electric
Affected products: modicon_m221, modicon_m221_firmware
CVE-2020-7569 (published 2020-11-19)
A CWE-434 Unrestricted Upload of File with Dangerous Type vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause an authenticated remote user being able to upload arbitrary files due to incorrect verification of user supplied files and achieve remote code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-434
Affected vendors: schneider-electric
Affected products: webreports
CVE-2020-7570 (published 2020-11-19)
A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting Stored) vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause an authenticated remote user being able to inject arbitrary web script or HTML due to incorrect sanitization of user-supplied data and achieve a Cross-Site Scripting stored attack against other WebReport users.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: schneider-electric
Affected products: webreports
CVE-2020-7571 (published 2020-11-19)
A CWE-79 Multiple Improper Neutralization of Input During Web Page Generation (Cross-site Scripting Reflected) vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause a remote attacker to inject arbitrary web script or HTML due to incorrect sanitization of user supplied data and achieve a Cross-Site Scripting reflected attack against other WebReport users.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: schneider-electric
Affected products: webreports
CVE-2020-7572 (published 2020-11-19)
A CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause an authenticated remote user being able to inject arbitrary XML code and obtain disclosure of confidential data, denial of service, server side request forgery due to improper configuration of the XML parser.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-611
Affected vendors: schneider-electric
Affected products: webreports
CVE-2020-7573 (published 2020-11-19)
A CWE-284 Improper Access Control vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause a remote attacker being able to access a restricted web resources due to improper access control.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Weakness: CWE-284
Affected vendors: schneider-electric
Affected products: webreports
CVE-2020-7574 (published 2020-04-14)
A vulnerability has been identified in Climatix POL908 (BACnet/IP module) (All versions), Climatix POL909 (AWM module) (All versions < V11.32). A persistent cross-site scripting (XSS) vulnerability exists in the "Server Config" web interface of the affected devices that could allow an attacker to inject arbitrary JavaScript code. The code could be potentially executed later by another (possibly privileged) user. The security vulnerability could be exploited by an attacker with network access to the affected system. Successful exploitation requires no system privileges. An attacker could use the vulnerability to compromise the confidentiality and integrity of other users' web session.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: siemens
Affected products: climatix_pol908, climatix_pol908_firmware, climatix_pol909, climatix_pol909_firmware
CVE-2020-7575 (published 2020-04-14)
A vulnerability has been identified in Climatix POL908 (BACnet/IP module) (All versions), Climatix POL909 (AWM module) (All versions < V11.32). A persistent cross-site scripting (XSS) vulnerability exists in the web server access log page of the affected devices that could allow an attacker to inject arbitrary JavaScript code via specially crafted GET requests. The code could be potentially executed later by another (privileged) user. The security vulnerability could be exploited by an attacker with network access to the affected system. Successful exploitation requires no system privileges. An attacker could use the vulnerability to compromise the confidentiality and integrity of other users' web sessions.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-80
Affected vendors: siemens
Affected products: climatix_pol908, climatix_pol908_firmware, climatix_pol909, climatix_pol909_firmware
CVE-2020-7576 (published 2020-07-14)
A vulnerability has been identified in Camstar Enterprise Platform (All versions), Opcenter Execution Core (All versions < V8.2), Opcenter Execution Core (V8.2). An authenticated user with the ability to create containers, packages or register defects could perform stored Cross-Site Scripting (XSS) attacks within the vulnerable software. The impact of this attack could result in the session cookies of legitimate users being stolen. Should the attacker gain access to these cookies, they could then hijack the session and perform arbitrary actions in the name of the victim.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: siemens
Affected products: opcenter_execution_core
CVE-2020-7577 (published 2020-07-14)
A vulnerability has been identified in Camstar Enterprise Platform (All versions), Opcenter Execution Core (All versions < V8.2). Through the use of several vulnerable fields of the application, an authenticated user could perform an SQL Injection attack by passing a modified SQL query downstream to the back-end server. The exploit of this vulnerability could be used to read, and potentially modify application data to which the user has access to.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-89
Affected vendors: siemens
Affected products: opcenter_execution_core