Modicon Mc80 (Part Numbers Bmkc80)
Approved changes feed: RSS · Atom
cpe:2.3:a:schneider_electric:modicon_mc80_(part_numbers_bmkc80):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Schneider Electric (90ae6a25-22b7-5d12-ba01-612e2f9226a5) |
|---|---|
| Product | Modicon Mc80 (Part Numbers Bmkc80) (db69fcb7-51c4-55f5-a832-479e167d34e3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-8938 |
vulnerable | 2026-06-08 07:00:26.165505 |
Details available
HIGH (8.1)
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could
cause a potential arbitrary code execution after a successful Man-In-The-Middle attack followed by sending a
crafted Modbus function call to tamper with memory area involved in memory size computation.
Published: 2024-11-13T04:20:19.875Z
Updated: 2024-11-13T15:26:23.491Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8937 |
vulnerable | 2026-06-08 07:00:26.164813 |
Details available
MEDIUM (6.5)
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could
cause a potential arbitrary code execution after a successful Man-In-The Middle attack followed by sending a
crafted Modbus function call to tamper with memory area involved in the authentication process.
Published: 2024-11-13T04:17:30.614Z
Updated: 2024-11-13T15:27:59.982Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8935 |
vulnerable | 2026-06-08 07:00:26.163408 |
Details available
HIGH (7.5)
CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause a denial of service and loss
of confidentiality and integrity of controllers when conducting a Man-In-The-Middle attack between the
controller and the engineering workstation while a valid user is establishing a communication session. This
vulnerability is inherent to Diffie Hellman algorithm which does not protect against Man-In-The-Middle attacks.
Published: 2024-11-13T04:10:09.599Z
Updated: 2024-11-13T15:31:54.906Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8933 |
vulnerable | 2026-06-08 07:00:26.157043 |
Details available
HIGH (7.5)
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel
vulnerability exists that could cause retrieval of password hash that could lead to denial of service and loss of
confidentiality and integrity of controllers. To be successful, the attacker needs to inject themself inside the
logical network while a valid user uploads or downloads a project file into the controller.
Published: 2024-11-13T04:06:09.279Z
Updated: 2024-11-13T15:34:19.535Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.