Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior
Críticas / altas1449▲ 87 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
9 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.5) | 0.75% | — | Schneider-electric Modicon M340 BMX P34-2010 FirmwareSchneider-electric Modicon M340 BMX P34-2030 FirmwareSchneider-electric Modicon M580 Bmeh582040 FirmwareSchneider-electric Modicon M580 Bmeh582040c Firmware+44 | 22/11/2022 | 17/6/2026 | A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus TCP protocol. Affected products: Modicon M340 CPU (part numbers BMXP34*)(V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and… | |
| Modificada | Media (5.3) | 1.1% | — | Schneider-electric Modicon M340 Bmxp341000 FirmwareSchneider-electric Modicon M340 Bmxp342000 FirmwareSchneider-electric Modicon M340 Bmxp3420102 FirmwareSchneider-electric Modicon M340 Bmxp3420102cl Firmware+15 | 11/12/2020 | 17/6/2026 | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause denial of HTTP and FTP services when a… | |
| Modificada | Media (5.3) | 0.91% | — | Schneider-electric Modicon M340 Bmxp341000 FirmwareSchneider-electric Modicon M340 Bmxp342000 FirmwareSchneider-electric Modicon M340 Bmxp3420102 FirmwareSchneider-electric Modicon M340 Bmxp3420102cl Firmware+16 | 11/12/2020 | 17/6/2026 | A CWE-425: Direct Request ('Forced Browsing') vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause disclosure of sensitive data when sending a specially crafted… | |
| Modificada | Crítica (9.8) | 2.3% | — | Schneider-electric Modicon M340 Bmxp341000 FirmwareSchneider-electric Modicon M340 Bmxp342000 FirmwareSchneider-electric Modicon M340 Bmxp3420102 FirmwareSchneider-electric Modicon M340 Bmxp3420102cl Firmware+19 | 11/12/2020 | 17/6/2026 | A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause unauthenticated command execution in the controller… | |
| Modificada | Alta (7.5) | 1.2% | — | Schneider-electric Modicon M340 Bmxp341000 FirmwareSchneider-electric Modicon M340 Bmxp342000 FirmwareSchneider-electric Modicon M340 Bmxp3420102 FirmwareSchneider-electric Modicon M340 Bmxp3420102cl Firmware+16 | 11/12/2020 | 17/6/2026 | A CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause a denial of service vulnerability when a… | |
| Modificada | Alta (7.5) | 1.5% | — | Schneider-electric Modicon M340 Bmxp341000 FirmwareSchneider-electric Modicon M340 Bmxp342000 FirmwareSchneider-electric Modicon M340 Bmxp3420102 FirmwareSchneider-electric Modicon M340 Bmxp3420102cl Firmware+17 | 11/12/2020 | 17/6/2026 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal' Vulnerability Type) vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause… | |
| Modificada | Alta (8.8) | 1.1% | — | Schneider-electric Modicon Tsxety4103 FirmwareSchneider-electric Modicon Tsxety5103 FirmwareSchneider-electric Modicon Tsxp574634 FirmwareSchneider-electric Modicon Tsxp575634 Firmware+16 | 18/11/2020 | 17/6/2026 | A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause write access and the execution of commands when… | |
| Modificada | Alta (8.8) | 1.1% | — | Schneider-electric Modicon Tsxety4103 FirmwareSchneider-electric Modicon Tsxety5103 FirmwareSchneider-electric Modicon Tsxp574634 FirmwareSchneider-electric Modicon Tsxp575634 Firmware+16 | 18/11/2020 | 17/6/2026 | A CWE-787: Out-of-bounds Write vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause corruption of data, a crash, or code execution when uploading a specially crafted file on the… | |
| Modificada | Alta (8.1) | 0.90% | — | Schneider-electric Modicon Tsxety4103 FirmwareSchneider-electric Modicon Tsxety5103 FirmwareSchneider-electric Modicon Tsxp574634 FirmwareSchneider-electric Modicon Tsxp575634 Firmware+16 | 18/11/2020 | 17/6/2026 | A CWE-125: Out-of-Bounds Read vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause a segmentation fault or a buffer overflow when uploading a specially crafted file on the controller… |