Schneider-Electric: >> Modicon M340 Firmware >> 3.20 Security Vulnerabilities
A CWE-807: Reliance on Untrusted Inputs in a Security Decision vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause invalid information displayed in Unity Pro software.
CVSS Score
5.3
EPSS Score
0.002
Published
2019-05-22
A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when an invalid private command parameter is sent to the controller over Modbus.
CVSS Score
7.5
EPSS Score
0.148
Published
2019-05-22
Page 3