https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T00:48:30.764059+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-04700 bdu:2022-04700 2026-10-03T00:48:30.774170+00:00 bdu:2022-04700 https://cve.radiocsirt.org/vuln/certfr-2019-avi-312 certfr-2019-avi-312 — De multiples vulnérabilités ont été découvertes dans les produits Schneider Electric. Certaines d'entre elles permetten… 2026-10-03T00:48:30.774209+00:00 certfr-2019-avi-312 https://cve.radiocsirt.org/vuln/cnvd-2017-09898 cnvd-2017-09898 2026-10-03T00:48:30.774228+00:00 cnvd-2017-09898 https://cve.radiocsirt.org/vuln/euvd-2026-73674 EUVD-2026-73674 2026-10-03T00:48:30.774241+00:00 EUVD-2026-73674 https://cve.radiocsirt.org/vuln/fkie_cve-2017-6028 fkie_cve-2017-6028 2026-10-03T00:48:30.774251+00:00

An Insufficiently Protected Credentials issue was discovered in Schneider Electric Modicon PLCs Modicon M241, all firmware versions, and Modicon M251, all firmware versions. Log-in credentials are sent over the network with Base64 encoding leaving them susceptible to sniffing. Sniffed credentials could then be used to log into the web application.

 https://cve.radiocsirt.org/vuln/ghsa-55h6-p6m7-f4h7 GHSA-55h6-p6m7-f4h7 2026-10-03T00:48:30.774279+00:00

An Insufficiently Protected Credentials issue was discovered in Schneider Electric Modicon PLCs Modicon M241, all firmware versions, and Modicon M251, all firmware versions. Log-in credentials are sent over the network with Base64 encoding leaving them susceptible to sniffing. Sniffed credentials could then be used to log into the web application.

 https://cve.radiocsirt.org/vuln/gsd-2017-6028 gsd-2017-6028 2026-10-03T00:48:30.774295+00:00 gsd-2017-6028 https://cve.radiocsirt.org/vuln/icsa-17-089-02 ICSA-17-089-02 — Schneider Electric Modicon PLCs 2026-10-03T00:48:30.774305+00:00

The affected products generate insufficiently random TCP initial sequence numbers that may allow an attacker to predict the numbers from previous values. This may allow an attacker to spoof or disrupt TCP connections.CVE-2017-6030 has been assigned to this vulnerability. A CVSS v3 base score of 6.5 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L). The session numbers generated by the web application are lacking randomization and are shared between several users. This may allow a current session to be compromised.CVE-2017-6026 has been assigned to this vulnerability. A CVSS v3 base score of 6.5 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N). Log-in credentials are sent over the network with Base64 encoding leaving them susceptible to sniffing. Sniffed credentials could then be used to log into the web application.CVE-2017-6028 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).