Vulnerabilities > Schneider Electric > BMX P34X Firmware

DATE CVE VULNERABILITY TITLE RISK
2020-04-22 CVE-2019-6859 Use of Hard-coded Credentials vulnerability in Schneider-Electric products
A CWE-798: Use of Hardcoded Credentials vulnerability exists in Modicon Controllers (All versions of the following CPUs and Communication Module product references listed in the Security Notifications), which could cause the disclosure of FTP hardcoded credentials when using the Web server of the controller on an unsecure network.
network
low complexity
schneider-electric CWE-798
5.0
2019-11-20 CVE-2019-6852 Information Exposure vulnerability in Schneider-Electric products
A CWE-200: Information Exposure vulnerability exists in Modicon Controllers (M340 CPUs, M340 communication modules, Premium CPUs, Premium communication modules, Quantum CPUs, Quantum communication modules - see security notification for specific versions), which could cause the disclosure of FTP hardcoded credentials when using the Web server of the controller on an unsecure network.
network
low complexity
schneider-electric CWE-200
5.0