VDB
CNVD-2019-15887
CNVD-2019-15887
PUBLISHED
Schneider Electric Modicon M100等都是法国施耐德电气(Schneider Electric)公司的产品。Schneider Electric Modicon M100是一款可编程逻辑控制器。Schneider Electric Modicon LMC078是一款用于运动控制器。Schneider Electric ATV IMC drive controller是一款驱动控制器。 多款Schneider Electric产品中存在访问控制错误漏洞。该漏洞源于网络系统或产品未正确限制来自未授权角色的资源访问,可能导致修改设备IP配置(IP地址,网络掩码和网关IP地址)。
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Schneider Electric Modicon M221 | ||
| Schneider Electric Modicon M251 | ||
| Schneider Electric Modicon LMC078 | ||
| Schneider Electric Modicon LMC058 | ||
| Schneider Electric Modicon M241 | ||
| Schneider Electric Modicon M258 | ||
| Schneider Electric PacDrive Pro2 | ||
| Schneider Electric PacDrive Pro | ||
| Schneider Electric PacDrive Eco | ||
| Schneider Electric Modicon M200 | ||
| Schneider Electric ATV IMC drive controller |
Timeline
- May 22, 2019 CVE ID Reserved
- May 30, 2019 CVE Published