MM
Product
Modicon M580 Firmware
by Schneider-electric · last CVE Apr 19, 2023
41
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 26Medium 10Low 0
Watch

Add Modicon M580 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-7475
9.8
2%
Mar 23
A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), reflective DLL, vulnerability exists in EcoStruxure Control Expert…
Affected: before 3.10
CVE-2019-6808
9.8
8%
May 22
A CWE-284: Improper Access Control vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a remote code…
Affected: before 2.90
CVE-2018-7847
9.8
4%
May 22
A CWE-284: Improper Access Control vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service…
Affected: All versions, or not specified
CVE-2018-7846
9.8
30%
May 22
A CWE-501: Trust Boundary Violation vulnerability on connection to the Controller exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and Modicon Premium…
Affected: All versions, or not specified
CVE-2018-7842
9.8
35%
May 22
A CWE-290: Authentication Bypass by Spoofing vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause an…
Affected: All versions, or not specified
CVE-2019-6848
8.6
32%
Oct 29
A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 CPU (BMEx58*) and Modicon M580 communication module (BMENOC0311, BMENOC0321) (see…
Affected: All versions, or not specified
CVE-2023-25619
7.5
1%
Apr 19
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when communicating over the Modbus TCP…
Affected: before 4.10
CVE-2019-6857
7.5
2%
Jan 6
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for…
Affected: before 2.80
CVE-2019-6856
7.5
2%
Jan 6
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for…
Affected: before 2.80
CVE-2018-7794
7.5
1%
Jan 6
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for…
Affected: before 2.80
CVE-2019-6851
7.5
29%
Oct 29
A CWE-538: File and Directory Information Exposure vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (all firmware versions), which could cause…
Affected: All versions, or not specified
CVE-2019-6850
7.5
2%
Oct 29
A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure of sensitive information when…
Affected: All versions, or not specified
CVE-2019-6849
7.5
2%
Oct 29
A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure of sensitive information when…
Affected: All versions, or not specified
CVE-2019-6845
7.5
1%
Oct 29
A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (all firmware versions), which…
Affected: All versions, or not specified
CVE-2019-6829
7.5
2%
Sep 17
A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware version prior to V2.90) and Modicon M340 (firmware version prior to V3.10), which could cause a…
Affected: before 2.90
CVE-2019-6828
7.5
2%
Sep 17
A CWE-248: Uncaught Exception vulnerability exists Modicon M580 (firmware version prior to V2.90), Modicon M340 (firmware version prior to V3.10), Modicon Premium (all versions),…
Affected: before 2.90
CVE-2019-6809
7.5
2%
Sep 17
A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware versions prior to V2.90), Modicon M340 (firmware versions prior to V3.10), Modicon Premium (all…
Affected: before 2.90
CVE-2019-6807
7.5
2%
May 22
A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible denial of…
Affected: before 2.90
CVE-2019-6806
7.5
2%
May 22
A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of…
Affected: before 2.90
CVE-2018-7857
7.5
2%
May 22
A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible Denial of…
Affected: before 2.80
CVE-2018-7856
7.5
2%
May 22
A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible denial of…
Affected: before 2.90
CVE-2018-7855
7.5
3%
May 22
A CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a Denial of Service…
Affected: before 2.90
CVE-2018-7854
7.5
2%
May 22
A CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a denial of Service…
Affected: before 2.90
CVE-2018-7853
7.5
2%
May 22
A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when…
Affected: before 2.90
CVE-2018-7844
7.5
3%
May 22
A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of…
Affected: All versions, or not specified
CVE-2019-6819
7.5
1%
May 22
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists which could cause a possible Denial of Service when specific Modbus frames are sent to the…
Affected: before 2.80
CVE-2018-7852
7.5
4%
May 22
A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when…
Affected: All versions, or not specified
CVE-2018-7849
7.5
3%
May 22
A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and Modicon Premium which could cause a possible Denial of…
Affected: All versions, or not specified
CVE-2018-7848
7.5
3%
May 22
A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of…
Affected: before 2.90
CVE-2018-7845
7.5
3%
May 22
A CWE-125: Out-of-bounds Read vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of…
Affected: All versions, or not specified
CVE-2018-7843
7.5
3%
May 22
A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when…
Affected: All versions, or not specified
CVE-2023-25620
6.5
1%
Apr 19
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when a malicious project file is loaded…
Affected: before 4.10
CVE-2019-6846
6.5
1%
Oct 29
A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which…
Affected: All versions, or not specified
CVE-2019-6821
6.5
2%
May 22
CWE-330: Use of Insufficiently Random Values vulnerability, which could cause the hijacking of the TCP connection when using Ethernet communication in Modicon M580 firmware…
Affected: before 2.30
CVE-2019-6830
5.9
1%
Sep 17
A CWE-248: Uncaught Exception vulnerability exists IN Modicon M580 all versions prior to V2.80, which could cause a possible denial of service when sending an appropriately timed…
Affected: before 2.80
CVE-2018-7850
5.3
2%
May 22
A CWE-807: Reliance on Untrusted Inputs in a Security Decision vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which…
Affected: All versions, or not specified
CVE-2019-6847
4.9
1%
Oct 29
A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could…
Affected: All versions, or not specified
CVE-2019-6844
4.9
1%
Oct 29
A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could…
Affected: All versions, or not specified
CVE-2019-6843
4.9
1%
Oct 29
A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 with firmware (version prior to V3.10), Modicon M340 (all firmware versions), and…
Affected: All versions, or not specified
CVE-2019-6842
4.9
1%
Oct 29
A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could…
Affected: All versions, or not specified
CVE-2019-6841
4.9
24%
Oct 29
A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 with firmware (version prior to V3.10), Modicon M340 (all firmware versions), and…
Affected: All versions, or not specified
Showing 41