https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T01:32:28.281114+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-04191 bdu:2021-04191 2026-10-06T01:32:28.292035+00:00 bdu:2021-04191 https://cve.radiocsirt.org/vuln/certfr-2020-avi-801 certfr-2020-avi-801 — De multiples vulnérabilités ont été découvertes dans les produits Schneider. Elles permettent à un attaquant de provoqu… 2026-10-06T01:32:28.292078+00:00 certfr-2020-avi-801 https://cve.radiocsirt.org/vuln/euvd-2026-37979 EUVD-2026-37979 2026-10-06T01:32:28.292107+00:00 EUVD-2026-37979 https://cve.radiocsirt.org/vuln/fkie_cve-2020-7535 fkie_cve-2020-7535 2026-10-06T01:32:28.292131+00:00

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal' Vulnerability Type) vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause disclosure of information when sending a specially crafted request to the controller over HTTP.

 https://cve.radiocsirt.org/vuln/ghsa-jqm2-jgff-xhhh GHSA-jqm2-jgff-xhhh 2026-10-06T01:32:28.292177+00:00

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal' Vulnerability Type) vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause disclosure of information when sending a specially crafted request to the controller over HTTP.

 https://cve.radiocsirt.org/vuln/gsd-2020-7535 gsd-2020-7535 2026-10-06T01:32:28.292208+00:00 gsd-2020-7535 https://cve.radiocsirt.org/vuln/sevd-2020-343-05 SEVD-2020-343-05 — Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and Associated Communication Modules 2026-10-06T01:32:28.292227+00:00

Schneider Electric is aware of a vulnerability in the web server of the Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and associated communication modules. The Modicon Ethernet Programmable Automation controller products are controllers for industrial process and infrastructure. Failure to apply the remediations provided below may risk an attack on the web server, which could result in disclosure of sensitive information.September 2022 Update: A remediation is available for Modicon M340 X80 Ethernet Communication Modules BMXNOC0401 (page 2).