https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 00:18:40 +0000 https://cve.radiocsirt.org/vuln/bdu:2018-01159 bdu:2018-01159 https://cve.radiocsirt.org/vuln/bdu:2018-01159 https://cve.radiocsirt.org/vuln/certfr-2018-avi-146 certfr-2018-avi-146 https://cve.radiocsirt.org/vuln/certfr-2018-avi-146 https://cve.radiocsirt.org/vuln/cnvd-2018-06521 cnvd-2018-06521 https://cve.radiocsirt.org/vuln/cnvd-2018-06521 https://cve.radiocsirt.org/vuln/euvd-2026-63097 EUVD-2026-63097 https://cve.radiocsirt.org/vuln/euvd-2026-63097 https://cve.radiocsirt.org/vuln/fkie_cve-2018-7240 <p>A vulnerability exists in Schneider Electric&#39;s Modicon Quantum in all versions of the communication modules which could allow arbitrary code execution. An FTP command used to upgrade the firmware of the module can be misused to cause a denial of service, or in extreme cases, to load a malicious firmware.</p> <p>A vulnerability exists in Schneider Electric&#39;s Modicon Quantum in all versions of the communication modules which could allow arbitrary code execution. An FTP command used to upgrade the firmware of the module can be misused to cause a denial of service, or in extreme cases, to load a malicious firmware.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-7240 https://cve.radiocsirt.org/vuln/ghsa-62m4-6p37-pc95 <p>A vulnerability exists in Schneider Electric&#39;s Modicon Quantum in all versions of the communication modules which could allow arbitrary code execution. An FTP command used to upgrade the firmware of the module can be misused to cause a denial of service, or in extreme cases, to load a malicious firmware.</p> <p>A vulnerability exists in Schneider Electric&#39;s Modicon Quantum in all versions of the communication modules which could allow arbitrary code execution. An FTP command used to upgrade the firmware of the module can be misused to cause a denial of service, or in extreme cases, to load a malicious firmware.</p> https://cve.radiocsirt.org/vuln/ghsa-62m4-6p37-pc95 https://cve.radiocsirt.org/vuln/gsd-2018-7240 gsd-2018-7240 https://cve.radiocsirt.org/vuln/gsd-2018-7240 https://cve.radiocsirt.org/vuln/icsa-18-086-01 <p>The FTP server does not limit the length of a command parameter which may cause a buffer overflow condition. CVE-2018-7240 has been assigned to this vulnerability. A CVSS v3 base score of 4.8 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H). The FTP servers contain a hard-coded account, which could allow unauthorized access. CVE-2018-7241 has been assigned to this vulnerability. A CVSS v3 base score of 5.9 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H). The FTP server does not limit the length of a command parameter, which may cause a buffer overflow condition. CVE-2018-7242 has been assigned to this vulnerability. A CVSS v3 base score of 5.9 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H).</p> <p>The FTP server does not limit the length of a command parameter which may cause a buffer overflow condition. CVE-2018-7240 has been assigned to this vulnerability. A CVSS v3 base score of 4.8 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H). The FTP servers contain a hard-coded account, which could allow unauthorized access. CVE-2018-7241 has been assigned to this vulnerability. A CVSS v3 base score of 5.9 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H). The FTP server does not limit the length of a command parameter, which may cause a buffer overflow condition. CVE-2018-7242 has been assigned to this vulnerability. A CVSS v3 base score of 5.9 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H).</p> https://cve.radiocsirt.org/vuln/icsa-18-086-01 https://cve.radiocsirt.org/vuln/sevd-2018-081-01 <p>Schneider Electric is aware of multiple vulnerabilities in the FTP servers of its Modicon PAC controllers. Modicon PACs (Programmable Automation Controllers) control and monitor industrial operations in a sustainable, flexible, efficient, and protected way. Our PLCs and PACs supply edge technology, augmenting it with Ethernet connectivity, built-in cybersecurity, and processing power needed to handle Big Data analysis and protect against new vulnerabilities among connected industrial assets, across devices or into the cloud. Failure to address these vulnerabilities could result in unauthorized access to your PLC and a denial of service or other malicious activity. March 2023 Update: Remediation for the Modicon M580 CPU is available for download</p> <p>Schneider Electric is aware of multiple vulnerabilities in the FTP servers of its Modicon PAC controllers. Modicon PACs (Programmable Automation Controllers) control and monitor industrial operations in a sustainable, flexible, efficient, and protected way. Our PLCs and PACs supply edge technology, augmenting it with Ethernet connectivity, built-in cybersecurity, and processing power needed to handle Big Data analysis and protect against new vulnerabilities among connected industrial assets, across devices or into the cloud. Failure to address these vulnerabilities could result in unauthorized access to your PLC and a denial of service or other malicious activity. March 2023 Update: Remediation for the Modicon M580 CPU is available for download</p> https://cve.radiocsirt.org/vuln/sevd-2018-081-01