https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:20:58.668165+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2018-01158 bdu:2018-01158 2026-10-02T23:20:58.772960+00:00 bdu:2018-01158 https://cve.radiocsirt.org/vuln/certfr-2018-avi-146 certfr-2018-avi-146 — De multiples vulnérabilités ont été découvertes dans SCADA Schneider Electric Modicon. Certaines d'entre elles permette… 2026-10-02T23:20:58.773000+00:00 certfr-2018-avi-146 https://cve.radiocsirt.org/vuln/cnvd-2018-06519 cnvd-2018-06519 2026-10-02T23:20:58.773021+00:00 cnvd-2018-06519 https://cve.radiocsirt.org/vuln/euvd-2026-63102 EUVD-2026-63102 2026-10-02T23:20:58.773034+00:00 EUVD-2026-63102 https://cve.radiocsirt.org/vuln/fkie_cve-2018-7242 fkie_cve-2018-7242 2026-10-02T23:20:58.773045+00:00

Vulnerable hash algorithms exists in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules. The algorithm used to encrypt the password is vulnerable to hash collision attacks.

 https://cve.radiocsirt.org/vuln/ghsa-4cgj-crgg-xwgf GHSA-4cgj-crgg-xwgf 2026-10-02T23:20:58.773074+00:00

Vulnerable hash algorithms exists in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules. The algorithm used to encrypt the password is vulnerable to hash collision attacks.

 https://cve.radiocsirt.org/vuln/gsd-2018-7242 gsd-2018-7242 2026-10-02T23:20:58.773091+00:00 gsd-2018-7242 https://cve.radiocsirt.org/vuln/icsa-18-086-01 ICSA-18-086-01 — Schneider Electric Modicon Premium, Modicon Quantum, Modicon M340, and Modicon BMXNOR0200 2026-10-02T23:20:58.773102+00:00

The FTP server does not limit the length of a command parameter which may cause a buffer overflow condition. CVE-2018-7240 has been assigned to this vulnerability. A CVSS v3 base score of 4.8 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H). The FTP servers contain a hard-coded account, which could allow unauthorized access. CVE-2018-7241 has been assigned to this vulnerability. A CVSS v3 base score of 5.9 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H). The FTP server does not limit the length of a command parameter, which may cause a buffer overflow condition. CVE-2018-7242 has been assigned to this vulnerability. A CVSS v3 base score of 5.9 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H).

 https://cve.radiocsirt.org/vuln/sevd-2018-081-01 SEVD-2018-081-01 — Embedded FTP Servers for Modicon PAC Controllers 2026-10-02T23:20:58.773126+00:00

Schneider Electric is aware of multiple vulnerabilities in the FTP servers of its Modicon PAC controllers. Modicon PACs (Programmable Automation Controllers) control and monitor industrial operations in a sustainable, flexible, efficient, and protected way. Our PLCs and PACs supply edge technology, augmenting it with Ethernet connectivity, built-in cybersecurity, and processing power needed to handle Big Data analysis and protect against new vulnerabilities among connected industrial assets, across devices or into the cloud. Failure to address these vulnerabilities could result in unauthorized access to your PLC and a denial of service or other malicious activity. March 2023 Update: Remediation for the Modicon M580 CPU is available for download