https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:21:03 +0000 https://cve.radiocsirt.org/vuln/bdu:2018-01158 bdu:2018-01158 https://cve.radiocsirt.org/vuln/bdu:2018-01158 https://cve.radiocsirt.org/vuln/certfr-2018-avi-146 certfr-2018-avi-146 https://cve.radiocsirt.org/vuln/certfr-2018-avi-146 https://cve.radiocsirt.org/vuln/cnvd-2018-06519 cnvd-2018-06519 https://cve.radiocsirt.org/vuln/cnvd-2018-06519 https://cve.radiocsirt.org/vuln/euvd-2026-63102 EUVD-2026-63102 https://cve.radiocsirt.org/vuln/euvd-2026-63102 https://cve.radiocsirt.org/vuln/fkie_cve-2018-7242 <p>Vulnerable hash algorithms exists in Schneider Electric&#39;s Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules. The algorithm used to encrypt the password is vulnerable to hash collision attacks.</p> <p>Vulnerable hash algorithms exists in Schneider Electric&#39;s Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules. The algorithm used to encrypt the password is vulnerable to hash collision attacks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-7242 https://cve.radiocsirt.org/vuln/ghsa-4cgj-crgg-xwgf <p>Vulnerable hash algorithms exists in Schneider Electric&#39;s Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules. The algorithm used to encrypt the password is vulnerable to hash collision attacks.</p> <p>Vulnerable hash algorithms exists in Schneider Electric&#39;s Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules. The algorithm used to encrypt the password is vulnerable to hash collision attacks.</p> https://cve.radiocsirt.org/vuln/ghsa-4cgj-crgg-xwgf https://cve.radiocsirt.org/vuln/gsd-2018-7242 gsd-2018-7242 https://cve.radiocsirt.org/vuln/gsd-2018-7242 https://cve.radiocsirt.org/vuln/icsa-18-086-01 <p>The FTP server does not limit the length of a command parameter which may cause a buffer overflow condition. CVE-2018-7240 has been assigned to this vulnerability. A CVSS v3 base score of 4.8 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H). The FTP servers contain a hard-coded account, which could allow unauthorized access. CVE-2018-7241 has been assigned to this vulnerability. A CVSS v3 base score of 5.9 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H). The FTP server does not limit the length of a command parameter, which may cause a buffer overflow condition. CVE-2018-7242 has been assigned to this vulnerability. A CVSS v3 base score of 5.9 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H).</p> <p>The FTP server does not limit the length of a command parameter which may cause a buffer overflow condition. CVE-2018-7240 has been assigned to this vulnerability. A CVSS v3 base score of 4.8 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H). The FTP servers contain a hard-coded account, which could allow unauthorized access. CVE-2018-7241 has been assigned to this vulnerability. A CVSS v3 base score of 5.9 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H). The FTP server does not limit the length of a command parameter, which may cause a buffer overflow condition. CVE-2018-7242 has been assigned to this vulnerability. A CVSS v3 base score of 5.9 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H).</p> https://cve.radiocsirt.org/vuln/icsa-18-086-01 https://cve.radiocsirt.org/vuln/sevd-2018-081-01 <p>Schneider Electric is aware of multiple vulnerabilities in the FTP servers of its Modicon PAC controllers. Modicon PACs (Programmable Automation Controllers) control and monitor industrial operations in a sustainable, flexible, efficient, and protected way. Our PLCs and PACs supply edge technology, augmenting it with Ethernet connectivity, built-in cybersecurity, and processing power needed to handle Big Data analysis and protect against new vulnerabilities among connected industrial assets, across devices or into the cloud. Failure to address these vulnerabilities could result in unauthorized access to your PLC and a denial of service or other malicious activity. March 2023 Update: Remediation for the Modicon M580 CPU is available for download</p> <p>Schneider Electric is aware of multiple vulnerabilities in the FTP servers of its Modicon PAC controllers. Modicon PACs (Programmable Automation Controllers) control and monitor industrial operations in a sustainable, flexible, efficient, and protected way. Our PLCs and PACs supply edge technology, augmenting it with Ethernet connectivity, built-in cybersecurity, and processing power needed to handle Big Data analysis and protect against new vulnerabilities among connected industrial assets, across devices or into the cloud. Failure to address these vulnerabilities could result in unauthorized access to your PLC and a denial of service or other malicious activity. March 2023 Update: Remediation for the Modicon M580 CPU is available for download</p> https://cve.radiocsirt.org/vuln/sevd-2018-081-01