Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2018-11-30	CVE-2018-7809	Weak Password Recovery Mechanism for Forgotten Password vulnerability in Schneider-Electric products An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 which could allow an unauthenticated remote user to access the password delete function of the web server. network low complexity schneider-electric CWE-640 critical	9.8
2018-11-30	CVE-2018-7811	Weak Password Recovery Mechanism for Forgotten Password vulnerability in Schneider-Electric products An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 which could allow an unauthenticated remote user to access the change password function of the web server network low complexity schneider-electric CWE-640 critical	9.8