Nikita Maksimov

The issue is related to hard-coded accounts in the communication modules of the affected controllers. This concern is also associated with the FTP server vulnerability in the programmable logic controllers' firmware, which involves the use of pre-set credentials. Exploitation of this issue could allow a remote attacker to gain access to the device.

Name of the Vulnerable Software and Affected Versions: Schneider Electric Modicon M340 versions (affected versions not specified) Schneider Electric Modicon Premium versions (affected versions not specified) Schneider Electric Modicon Quantum versions (affected versions not specified) Schneider Electric Modicon BMXNOR0200 versions (affected versions not specified) Description: The issue is caused by a buffer overflow in the memory, potentially allowing a remote attacker to cause a denial of service using a specially crafted SOAP request. The buffer overflow vulnerability is caused by the length of the source string specified as the number of bytes to be copied, instead of the buffer size. Recommendations: For Schneider Electric Modicon M340, consider disabling the vulnerable function until a patch is available. For Schneider Electric Modicon Premium, restrict access to the vulnerable module to minimize the risk of exploitation. For Schneider Electric Modicon Quantum, avoid using the vulnerable API endpoint until the issue is resolved. For Schneider Electric Modicon BMXNOR0200, as a temporary workaround, consider disabling the vulnerable component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 (affected versions not specified) Description: A buffer overflow issue exists in the web services that process SOAP requests, potentially allowing a remote attacker to cause a denial of service using specially crafted SOAP requests. The vulnerability is related to the processing of SOAP requests and could result in a buffer overflow, leading to a denial of service. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers (affected versions not specified) Description: The issue concerns a vulnerable hash algorithm used for password encryption in the communication modules of the mentioned controllers. This vulnerability makes the algorithm susceptible to hash collision attacks. Additionally, errors in the implementation of the cryptographic algorithm in the FTP server of the programmable logic controllers' firmware may allow a remote attacker to guess passwords. Recommendations: For all affected versions, consider disabling or restricting access to the vulnerable communication modules until a secure alternative or patch is available. As a temporary workaround, restrict access to the FTP server to minimize the risk of exploitation. Avoid using weak passwords and consider implementing additional security measures to protect against remote attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.