Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2018-12-17	CVE-2018-7804	Open Redirect vulnerability in Schneider-Electric products A URL Redirection to Untrusted Site vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where a user clicking on a specially crafted link can be redirected to a URL of the attacker's choosing. network low complexity schneider-electric CWE-601	6.1
2018-11-30	CVE-2018-7810	Cross-site Scripting vulnerability in Schneider-Electric products An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 allowing an attacker to craft a URL containing JavaScript that will be executed within the user's browser, potentially impacting the machine the browser is running on. network low complexity schneider-electric CWE-79	6.1