https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:23:24 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-02703 bdu:2023-02703 https://cve.radiocsirt.org/vuln/bdu:2023-02703 https://cve.radiocsirt.org/vuln/certfr-2022-avi-017 certfr-2022-avi-017 https://cve.radiocsirt.org/vuln/certfr-2022-avi-017 https://cve.radiocsirt.org/vuln/euvd-2026-322660 EUVD-2026-322660 https://cve.radiocsirt.org/vuln/euvd-2026-322660 https://cve.radiocsirt.org/vuln/fkie_cve-2020-7534 <p>A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists on the web server used, that could cause a leak of sensitive data or unauthorized actions on the web server during the time the user is logged in. Affected Products: Modicon M340 CPUs: BMXP34 (All Versions), Modicon Quantum CPUs with integrated Ethernet (Copro): 140CPU65 (All Versions), Modicon Premium CPUs with integrated Ethernet (Copro): TSXP57 (All Versions), Modicon M340 ethernet modules: (BMXNOC0401, BMXNOE01, BMXNOR0200H) (All Versions), Modicon Quantum and Premium factory cast communication modules: (140NOE77111, 140NOC78*00, TSXETY5103, TSXETY4103) (All Versions)</p> <p>A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists on the web server used, that could cause a leak of sensitive data or unauthorized actions on the web server during the time the user is logged in. Affected Products: Modicon M340 CPUs: BMXP34 (All Versions), Modicon Quantum CPUs with integrated Ethernet (Copro): 140CPU65 (All Versions), Modicon Premium CPUs with integrated Ethernet (Copro): TSXP57 (All Versions), Modicon M340 ethernet modules: (BMXNOC0401, BMXNOE01, BMXNOR0200H) (All Versions), Modicon Quantum and Premium factory cast communication modules: (140NOE77111, 140NOC78*00, TSXETY5103, TSXETY4103) (All Versions)</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-7534 https://cve.radiocsirt.org/vuln/ghsa-5g6x-5wq6-p6g5 <p>A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists on the web server used, that could cause a leak of sensitive data or unauthorized actions on the web server during the time the user is logged in. Affected Products: Modicon M340 CPUs: BMXP34 (All Versions), Modicon Quantum CPUs with integrated Ethernet (Copro): 140CPU65 (All Versions), Modicon Premium CPUs with integrated Ethernet (Copro): TSXP57 (All Versions), Modicon M340 ethernet modules: (BMXNOC0401, BMXNOE01, BMXNOR0200H) (All Versions), Modicon Quantum and Premium factory cast communication modules: (140NOE77111, 140NOC78*00, TSXETY5103, TSXETY4103) (All Versions)</p> <p>A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists on the web server used, that could cause a leak of sensitive data or unauthorized actions on the web server during the time the user is logged in. Affected Products: Modicon M340 CPUs: BMXP34 (All Versions), Modicon Quantum CPUs with integrated Ethernet (Copro): 140CPU65 (All Versions), Modicon Premium CPUs with integrated Ethernet (Copro): TSXP57 (All Versions), Modicon M340 ethernet modules: (BMXNOC0401, BMXNOE01, BMXNOR0200H) (All Versions), Modicon Quantum and Premium factory cast communication modules: (140NOE77111, 140NOC78*00, TSXETY5103, TSXETY4103) (All Versions)</p> https://cve.radiocsirt.org/vuln/ghsa-5g6x-5wq6-p6g5 https://cve.radiocsirt.org/vuln/gsd-2020-7534 gsd-2020-7534 https://cve.radiocsirt.org/vuln/gsd-2020-7534 https://cve.radiocsirt.org/vuln/sevd-2022-011-01 <p>Schneider Electric is aware of multiple vulnerabilities in its Modicon M340 controller and Communication Modules. The Modicon Ethernet Programmable Automation products are controllers for industrial process and infrastructure. The Modicon M340 offers compactness, flexibility, scalability, and robustness for the process industry and a wide range of demanding automation applications. The Eagle40 device and the accompanying security guidance are intended to be the full solution for these vulnerabilities. Failure to apply the mitigations provided below may risk disclosure of sensitive information, unauthorized web server actions and denial of service.</p> <p>Schneider Electric is aware of multiple vulnerabilities in its Modicon M340 controller and Communication Modules. The Modicon Ethernet Programmable Automation products are controllers for industrial process and infrastructure. The Modicon M340 offers compactness, flexibility, scalability, and robustness for the process industry and a wide range of demanding automation applications. The Eagle40 device and the accompanying security guidance are intended to be the full solution for these vulnerabilities. Failure to apply the mitigations provided below may risk disclosure of sensitive information, unauthorized web server actions and denial of service.</p> https://cve.radiocsirt.org/vuln/sevd-2022-011-01