Modicon M100 Firmware

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-7489 Apr 22, 19:15 CRITICAL PATCH Act Now

A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability exists on EcoStruxure Machine Expert - Basic or SoMachine Basic programming. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Code Injection Schneider Electric Modicon M221 Firmware Modicon M100 Firmware Modicon M200 Firmware +2

NVD VulDB

CVSS 3.1

9.8

EPSS

0.7%

CVE-2019-6820 May 22, 20:29 HIGH This Week

A CWE-306: Missing Authentication for Critical Function vulnerability exists which could cause a modification of device IP configuration (IP address, network mask and gateway IP address) when a. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Schneider Electric Modicon M251 Firmware Modicon M241 Firmware Modicon M221 Firmware +9

NVD VulDB

CVSS 3.1

8.2

EPSS

0.3%

CVE-2020-7489

EPSS 1% CVSS 9.8

CRITICAL PATCH Act Now

Code Injection Schneider Electric Modicon M221 Firmware +4

NVD VulDB

CVE-2019-6820

EPSS 0% CVSS 8.2

HIGH This Week

Authentication Bypass Schneider Electric Modicon M251 Firmware +11

NVD VulDB