Modicon M580 Firmware vulnerabilities | LiveThreat CVE Feed

Product

Modicon M580 Firmware

by Schneider-electric · last CVE Apr 19, 2023

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities41 In the news0 Timeline

Severity mix

Critical 5High 26Medium 10Low 0

Severity

All severities41 Critical5 High26 Medium10 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Modicon M580 Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-25620	6.5	1%	Apr 19	A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when a malicious project file is loaded… Affected: before 4.10
CVE-2019-6846	6.5	1%	Oct 29	A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which… Affected: All versions, or not specified
CVE-2019-6821	6.5	2%	May 22	CWE-330: Use of Insufficiently Random Values vulnerability, which could cause the hijacking of the TCP connection when using Ethernet communication in Modicon M580 firmware… Affected: before 2.30
CVE-2019-6830	5.9	1%	Sep 17	A CWE-248: Uncaught Exception vulnerability exists IN Modicon M580 all versions prior to V2.80, which could cause a possible denial of service when sending an appropriately timed… Affected: before 2.80
CVE-2018-7850	5.3	2%	May 22	A CWE-807: Reliance on Untrusted Inputs in a Security Decision vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which… Affected: All versions, or not specified
CVE-2019-6847	4.9	1%	Oct 29	A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could… Affected: All versions, or not specified
CVE-2019-6844	4.9	1%	Oct 29	A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could… Affected: All versions, or not specified
CVE-2019-6843	4.9	1%	Oct 29	A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 with firmware (version prior to V3.10), Modicon M340 (all firmware versions), and… Affected: All versions, or not specified
CVE-2019-6842	4.9	1%	Oct 29	A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could… Affected: All versions, or not specified
CVE-2019-6841	4.9	24%	Oct 29	A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 with firmware (version prior to V3.10), Modicon M340 (all firmware versions), and… Affected: All versions, or not specified