VDB

CNVD-2019-45185

CNVD-2019-45185 PUBLISHED

Schneider Electric Modicon M340等都是法国施耐德电气(Schneider Electric)公司的可编程逻辑控制器产品。 多款Schneider Electric产品存在授权问题漏洞。攻击者可借助/unsecure/embedded/builtin端点利用该漏洞在未经身份验证的情况下更改用户密码。

Affected Products

VendorProductVersions
Schneider Electric Modicon M340
cnvdSchneider Electric Modicon M340
Schneider Electric Quantum PLCs
cnvdSchneider Electric BMXNOR0200
cnvdSchneider Electric Premium
Schneider Electric BMXNOR0200
cnvdSchneider Electric Quantum PLCs
Schneider Electric Premium

Timeline

  • Dec 3, 2018 CVE ID Reserved
  • Dec 3, 2018 CVE Updated
  • Dec 12, 2019 CVE Published
Open in Interactive Console →
$ Console Community · 100/wk Open console ›