Schneider Electric Modicon Premium Firmware vulnerabilities

23 CVEs affecting Schneider Electric Modicon Premium Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-6828, published 2019-09-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-7842, published 2019-05-22. Critical severity, CVSS 9.8. EPSS: 35% chance of exploitation in the next 30 days. A CWE-290: Authentication Bypass by Spoofing vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause an elevation of privilege…
CVE-2018-7846, published 2019-05-22. Critical severity, CVSS 9.8. EPSS: 29.6% chance of exploitation in the next 30 days. A CWE-501: Trust Boundary Violation vulnerability on connection to the Controller exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and Modicon Premium which could cause…
CVE-2019-6808, published 2019-05-22. Critical severity, CVSS 9.8. EPSS: 8.2% chance of exploitation in the next 30 days. A CWE-284: Improper Access Control vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a remote code execution by…
CVE-2018-7847, published 2019-05-22. Critical severity, CVSS 9.8. EPSS: 3.8% chance of exploitation in the next 30 days. A CWE-284: Improper Access Control vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service or potential code…
CVE-2018-7852, published 2019-05-22. High severity, CVSS 7.5. EPSS: 3.6% chance of exploitation in the next 30 days. A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when an invalid private…
CVE-2018-7848, published 2019-05-22. High severity, CVSS 7.5. EPSS: 3.4% chance of exploitation in the next 30 days. A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of SNMP information when…
CVE-2018-7845, published 2019-05-22. High severity, CVSS 7.5. EPSS: 3.4% chance of exploitation in the next 30 days. A CWE-125: Out-of-bounds Read vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of unexpected data from the…
CVE-2018-7849, published 2019-05-22. High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days. A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and Modicon Premium which could cause a possible Denial of Service due to…
CVE-2018-7843, published 2019-05-22. High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days. A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when reading memory…
CVE-2018-7844, published 2019-05-22. High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days. A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of SNMP information when…

Latest

CVE-2019-6828, published 2019-09-17. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. A CWE-248: Uncaught Exception vulnerability exists Modicon M580 (firmware version prior to V2.90), Modicon M340 (firmware version prior to V3.10), Modicon Premium (all versions), and Modicon Quantum…
CVE-2019-6809, published 2019-09-17. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware versions prior to V2.90), Modicon M340 (firmware versions prior to V3.10), Modicon Premium (all versions), Modicon Quantum…
CVE-2019-6807, published 2019-05-22. High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days. A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible denial of service when writing…
CVE-2019-6806, published 2019-05-22. High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days. A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of SNMP information when…
CVE-2018-7857, published 2019-05-22. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible Denial of Service when writing…
CVE-2018-7856, published 2019-05-22. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible denial of Service when writing…
CVE-2018-7855, published 2019-05-22. High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days. A CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a Denial of Service when sending invalid…
CVE-2018-7854, published 2019-05-22. High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days. A CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a denial of Service when sending invalid…
CVE-2018-7853, published 2019-05-22. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when reading invalid…