Schneider Electric Legacy Modicon Quantum vulnerabilities

CVE-2023-25619 [HIGH] CWE-754 CVE-2023-25619: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cau A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when communicating over the Modbus TCP protocol.

CVE-2023-25620 [MEDIUM] CWE-754 CVE-2023-25620: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could c A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when a malicious project file is loaded onto the controller by an authenticated user.

CVE-2021-22786 [HIGH] CWE-200 CVE-2021-22786: A CWE-200: Information Exposure vulnerability exists that could cause the exposure of sensitive info A CWE-200: Information Exposure vulnerability exists that could cause the exposure of sensitive information stored on the memory of the controller when communicating over the Modbus TCP protocol. Affected Products: Modicon M340 CPU (part numbers BMXP34*) (Versions prior to V3.30), Modicon M580 CPU (part numbers BMEP* and BMEH*) (Versions prior to SV3.