Product:

Modicon_m100_firmware

(Schneider\-Electric)
Repositories

Unknown:

This might be proprietary software.

#Vulnerabilities 2
Date Id Summary Products Score Patch Annotated
2019-05-22 CVE-2019-6820 A CWE-306: Missing Authentication for Critical Function vulnerability exists which could cause a modification of device IP configuration (IP address, network mask and gateway IP address) when a specific Ethernet frame is received in all versions of: Modicon M100, Modicon M200, Modicon M221, ATV IMC drive controller, Modicon M241, Modicon M251, Modicon M258, Modicon LMC058, Modicon LMC078, PacDrive Eco ,PacDrive Pro, PacDrive Pro2 Atv_imc_drive_controller_firmware, Modicon_lmc058_firmware, Modicon_lmc078_firmware, Modicon_m100_firmware, Modicon_m200_firmware, Modicon_m221_firmware, Modicon_m241_firmware, Modicon_m251_firmware, Modicon_m258_firmware, Pacdrive_eco_firmware, Pacdrive_pro2_firmware, Pacdrive_pro_firmware 8.2
2020-04-22 CVE-2020-7489 A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability exists on EcoStruxure Machine Expert – Basic or SoMachine Basic programming software (versions in security notification). The result of this vulnerability, DLL substitution, could allow the transference of malicious code to the controller. Ecostruxure_machine_expert, Modicon_m100_firmware, Modicon_m200_firmware, Modicon_m221_firmware, Somachine_basic 9.8