https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:00:54.318636+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2014-00001 bdu:2014-00001 2026-10-03T02:00:54.340465+00:00 bdu:2014-00001 https://cve.radiocsirt.org/vuln/certfr-2022-avi-717 certfr-2022-avi-717 — De multiples vulnérabilités ont été découvertes dans les produits Schneider. Certaines d'entre elles permettent à un at… 2026-10-03T02:00:54.340498+00:00 certfr-2022-avi-717 https://cve.radiocsirt.org/vuln/euvd-2026-117034 EUVD-2026-117034 2026-10-03T02:00:54.340517+00:00 EUVD-2026-117034 https://cve.radiocsirt.org/vuln/fkie_cve-2011-4859 fkie_cve-2011-4859 2026-10-03T02:00:54.340529+00:00

The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771* and 140CPU65* modules, the Premium TSXETY* and TSXP57* modules, the M340 BMXNOE01* and BMXP3420* modules, and the STB DIO STBNIC2212 and STBNIP2* modules, uses hardcoded passwords for the (1) AUTCSE, (2) AUT_CSE, (3) fdrusers, (4) ftpuser, (5) loader, (6) nic2212, (7) nimrohs2212, (8) nip2212, (9) noe77111_v500, (10) ntpupdate, (11) pcfactory, (12) sysdiag, (13) target, (14) test, (15) USER, and (16) webserver accounts, which makes it easier for remote attackers to obtain access via the (a) TELNET, (b) Windriver Debug, or (c) FTP port.

 https://cve.radiocsirt.org/vuln/ghsa-wrpc-6j6r-gh72 GHSA-wrpc-6j6r-gh72 2026-10-03T02:00:54.340558+00:00

The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771* and 140CPU65* modules, the Premium TSXETY* and TSXP57* modules, the M340 BMXNOE01* and BMXP3420* modules, and the STB DIO STBNIC2212 and STBNIP2* modules, uses hardcoded passwords for the (1) AUTCSE, (2) AUT_CSE, (3) fdrusers, (4) ftpuser, (5) loader, (6) nic2212, (7) nimrohs2212, (8) nip2212, (9) noe77111_v500, (10) ntpupdate, (11) pcfactory, (12) sysdiag, (13) target, (14) test, (15) USER, and (16) webserver accounts, which makes it easier for remote attackers to obtain access via the (a) TELNET, (b) Windriver Debug, or (c) FTP port.

 https://cve.radiocsirt.org/vuln/gsd-2011-4859 gsd-2011-4859 2026-10-03T02:00:54.340577+00:00 gsd-2011-4859 https://cve.radiocsirt.org/vuln/icsa-12-018-01b ICSA-12-018-01B — Schneider Electric Quantum Ethernet Module Hard-Coded Credentials 2026-10-03T02:00:54.340601+00:00

The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771* and 140CPU65* modules, the Premium TSXETY* and TSXP57* modules, the M340 BMXNOE01* and BMXP3420* modules, and the STB DIO STBNIC2212 and STBNIP2* modules, uses hardcoded passwords for the (1) AUTCSE, (2) AUT_CSE, (3) fdrusers, (4) ftpuser, (5) loader, (6) nic2212, (7) nimrohs2212, (8) nip2212, (9) noe77111_v500, (10) ntpupdate, (11) pcfactory, (12) sysdiag, (13) target, (14) test, (15) USER, and (16) webserver accounts, which makes it easier for remote attackers to obtain access via the (a) TELNET, (b) Windriver Debug, or (c) FTP port.

 https://cve.radiocsirt.org/vuln/sevd-2018-081-01 SEVD-2018-081-01 — Embedded FTP Servers for Modicon PAC Controllers 2026-10-03T02:00:54.340627+00:00

Schneider Electric is aware of multiple vulnerabilities in the FTP servers of its Modicon PAC controllers. Modicon PACs (Programmable Automation Controllers) control and monitor industrial operations in a sustainable, flexible, efficient, and protected way. Our PLCs and PACs supply edge technology, augmenting it with Ethernet connectivity, built-in cybersecurity, and processing power needed to handle Big Data analysis and protect against new vulnerabilities among connected industrial assets, across devices or into the cloud. Failure to address these vulnerabilities could result in unauthorized access to your PLC and a denial of service or other malicious activity. March 2023 Update: Remediation for the Modicon M580 CPU is available for download