https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:01:15.549183+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-03130 bdu:2022-03130 2026-10-03T05:01:15.557786+00:00 bdu:2022-03130 https://cve.radiocsirt.org/vuln/certfr-2020-avi-726 certfr-2020-avi-726 — De multiples vulnérabilités ont été découvertes dans les produits Schneider Electric. Certaines d'entre elles permetten… 2026-10-03T05:01:15.557825+00:00 certfr-2020-avi-726 https://cve.radiocsirt.org/vuln/euvd-2026-322708 EUVD-2026-322708 2026-10-03T05:01:15.557854+00:00 EUVD-2026-322708 https://cve.radiocsirt.org/vuln/fkie_cve-2020-7564 fkie_cve-2020-7564 2026-10-03T05:01:15.557901+00:00

A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause write access and the execution of commands when uploading a specially crafted file on the controller over FTP.

 https://cve.radiocsirt.org/vuln/ghsa-m8xw-66cv-rfr6 GHSA-m8xw-66cv-rfr6 2026-10-03T05:01:15.557931+00:00

A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause write access and the execution of commands when uploading a specially crafted file on the controller over FTP.

 https://cve.radiocsirt.org/vuln/gsd-2020-7564 gsd-2020-7564 2026-10-03T05:01:15.557947+00:00 gsd-2020-7564 https://cve.radiocsirt.org/vuln/icsa-21-005-01 ICSA-21-005-01 — Schneider Electric Web Server on Modicon M340 2026-10-03T05:01:15.557958+00:00

An out-of-bounds read vulnerability exists which could cause a segmentation fault or a buffer overflow when uploading a specially crafted file on the controller over FTP. CVE-2020-7562 has been assigned to this vulnerability. A CVSS v3 base score of 6.3 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H). An out-of-bounds write vulnerability exists which could cause corruption of data, a crash, or code execution when uploading a specially crafted file on the controller over FTP. CVE-2020-7563 has been assigned to this vulnerability. A CVSS v3 base score of 6.3 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H). A classic buffer overflow vulnerability exists which could cause write access and the execution of commands when uploading a specially crafted file on the controller over FTP. CVE-2020-7564 has been assigned to this vulnerability. A CVSS v3 base score of 6.3 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H).

 https://cve.radiocsirt.org/vuln/sevd-2020-315-01 SEVD-2020-315-01 — Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules 2026-10-03T05:01:15.557981+00:00

Schneider Electric is aware of multiple vulnerabilities in the web server of the Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their communication modules. The Modicon Ethernet Programmable Automation products are controllers for industrial process and infrastructure. Failure to apply the mitigations provided below may risk write access and the execution of commands, which could result in corruption of data, or crash of the web server. September 2022 Update: A remediation is available for Modicon M340 X80 Ethernet Communication Module BMXNOC0401