Approved changes feed: RSS · Atom

cpe:2.3:h:schneider-electric:modicon_m200:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorSchneider Electric (e6a779d5-aeb8-5b94-be36-761d5c05741c)
ProductModicon M200 (dc7c9b85-02af-5196-9211-16491750b5a4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-7489 not_vulnerable 2026-06-08 05:27:13.294889 Details available
A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability exists on EcoStruxure Machine Expert – Basic or SoMachine Basic programming software (versions in security notification). The result of this vulnerability, DLL substitution, could allow the transference of malicious code to the controller.
Published: 2020-04-22T18:15:57.000Z
Updated: 2026-05-28T20:30:39.144Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6820 not_vulnerable 2026-06-08 05:14:13.255833 Details available
A CWE-306: Missing Authentication for Critical Function vulnerability exists which could cause a modification of device IP configuration (IP address, network mask and gateway IP address) when a specific Ethernet frame is received in all versions of: Modicon M100, Modicon M200, Modicon M221, ATV IMC drive controller, Modicon M241, Modicon M251, Modicon M258, Modicon LMC058, Modicon LMC078, PacDrive Eco ,PacDrive Pro, PacDrive Pro2
Published: 2019-05-22T19:40:20.000Z
Updated: 2026-05-28T19:28:52.915Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.