Vulnerabilities > Schneider Electric > 140Cpu65260 Firmware > 3.52

DATE CVE VULNERABILITY TITLE RISK
2020-12-01 CVE-2020-7533 Unspecified vulnerability in Schneider-Electric products
A CWE-255: Credentials Management vulnerability exists in Web Server on Modicon M340, Modicon Quantum and ModiconPremium Legacy offers and their Communication Modules (see security notification for version information) which could cause the execution of commands on the webserver without authentication when sending specially crafted HTTP requests.
network
low complexity
schneider-electric
critical
9.8
2020-01-06 CVE-2019-6857 Improper Check for Unusual or Exceptional Conditions vulnerability in Schneider-Electric products
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service of the controller when reading specific memory blocks using Modbus TCP.
network
low complexity
schneider-electric CWE-754
5.0