Schneider Electric Modicon Mc80
Approved changes feed: RSS · Atom
cpe:2.3:h:schneider-electric:modicon_mc80:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Schneider Electric (e6a779d5-aeb8-5b94-be36-761d5c05741c) |
|---|---|
| Product | Modicon Mc80 (4f5c6791-a5ed-522c-b193-91997799cffe) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-8938 |
vulnerable | 2026-06-08 07:00:26.165417 |
Details available
HIGH (8.1)
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could
cause a potential arbitrary code execution after a successful Man-In-The-Middle attack followed by sending a
crafted Modbus function call to tamper with memory area involved in memory size computation.
Published: 2024-11-13T04:20:19.875Z
Updated: 2024-11-13T15:26:23.491Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8933 |
vulnerable | 2026-06-08 07:00:26.154186 |
Details available
HIGH (7.5)
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel
vulnerability exists that could cause retrieval of password hash that could lead to denial of service and loss of
confidentiality and integrity of controllers. To be successful, the attacker needs to inject themself inside the
logical network while a valid user uploads or downloads a project file into the controller.
Published: 2024-11-13T04:06:09.279Z
Updated: 2024-11-13T15:34:19.535Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25620 |
not_vulnerable | 2026-06-08 05:56:09.544416 |
Details available
MEDIUM (6.5)
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that
could cause denial of service of the controller when a malicious project file is loaded onto the
controller by an authenticated user.
Published: 2023-04-19T08:17:57.240Z
Updated: 2025-02-05T14:58:06.851Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25619 |
not_vulnerable | 2026-06-08 05:56:09.539147 |
Details available
HIGH (7.5)
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that
could cause denial of service of the controller when communicating over the Modbus TCP
protocol.
Published: 2023-04-19T07:53:15.405Z
Updated: 2025-02-05T15:08:51.526Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.