Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2704▼ 598 respecto a la semana anterior
Críticas / altas1288▼ 199 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)299▼ 211 respecto a la semana anterior
5 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.5) | 0.75% | — | Schneider-electric Modicon M340 BMX P34-2010 FirmwareSchneider-electric Modicon M340 BMX P34-2030 FirmwareSchneider-electric Modicon M580 Bmeh582040 FirmwareSchneider-electric Modicon M580 Bmeh582040c Firmware+44 | 22/11/2022 | 17/6/2026 | A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus TCP protocol. Affected products: Modicon M340 CPU (part numbers BMXP34*)(V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and… | |
| Modificada | Alta (8.8) | 1.1% | — | Schneider-electric Modicon Tsxety4103 FirmwareSchneider-electric Modicon Tsxety5103 FirmwareSchneider-electric Modicon Tsxp574634 FirmwareSchneider-electric Modicon Tsxp575634 Firmware+16 | 18/11/2020 | 17/6/2026 | A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause write access and the execution of commands when… | |
| Modificada | Alta (8.8) | 1.1% | — | Schneider-electric Modicon Tsxety4103 FirmwareSchneider-electric Modicon Tsxety5103 FirmwareSchneider-electric Modicon Tsxp574634 FirmwareSchneider-electric Modicon Tsxp575634 Firmware+16 | 18/11/2020 | 17/6/2026 | A CWE-787: Out-of-bounds Write vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause corruption of data, a crash, or code execution when uploading a specially crafted file on the… | |
| Modificada | Alta (8.1) | 0.90% | — | Schneider-electric Modicon Tsxety4103 FirmwareSchneider-electric Modicon Tsxety5103 FirmwareSchneider-electric Modicon Tsxp574634 FirmwareSchneider-electric Modicon Tsxp575634 Firmware+16 | 18/11/2020 | 17/6/2026 | A CWE-125: Out-of-Bounds Read vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause a segmentation fault or a buffer overflow when uploading a specially crafted file on the controller… | |
| Modificada | Media (5) | 2.1% | — | Schneider-electric Modicon M340 BMX NOC 0401 FirmwareSchneider-electric Modicon M340 BMX NOE 0100 FirmwareSchneider-electric Modicon M340 BMX NOE 0100h FirmwareSchneider-electric Modicon M340 BMX NOE 0110 Firmware+8 | 4/4/2013 | 16/6/2026 | The Schneider Electric M340 PLC modules allow remote attackers to cause a denial of service (resource consumption) via unspecified vectors. NOTE: the vendor reportedly disputes this issue because it "could not be duplicated" and "an attacker could not remotely exploit this observed behavior to deny PLC control… |