Schneider Electric Modicon Quantum PLC does not perform authentication between the Unity software and PLC, which allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors.
References
| Link | Resource |
|---|---|
| http://secunia.com/advisories/47723 | Not Applicable |
| http://www.securityfocus.com/bid/51605 | Third Party Advisory VDB Entry |
| http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-020-03.pdf | Broken Link |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/72586 | Third Party Advisory VDB Entry |
| https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-12-020-03 | Third Party Advisory US Government Resource |
| http://secunia.com/advisories/47723 | Not Applicable |
| http://www.securityfocus.com/bid/51605 | Third Party Advisory VDB Entry |
| http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-020-03.pdf | Broken Link |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/72586 | Third Party Advisory VDB Entry |
| https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-12-020-03 | Third Party Advisory US Government Resource |
Configurations
History
21 Nov 2024, 01:35
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://secunia.com/advisories/47723 - Not Applicable | |
| References | () http://www.securityfocus.com/bid/51605 - Third Party Advisory, VDB Entry | |
| References | () http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-020-03.pdf - Broken Link | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/72586 - Third Party Advisory, VDB Entry | |
| References | () https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-12-020-03 - Third Party Advisory, US Government Resource |
Information
Published : 2012-01-28 01:55
Updated : 2024-11-21 01:35
NVD link : CVE-2012-0931
Mitre link : CVE-2012-0931
CVE.ORG link : CVE-2012-0931
JSON object : View
Products Affected
schneider-electric
- modicon_quantum_plc
CWE
CWE-287
Improper Authentication