CVE-2013-2763
** DISPUTED ** The Schneider Electric M340 PLC modules allow remote attackers to cause a denial...
The Schneider Electric M340 PLC modules allow remote attackers to cause a denial of service (resource consumption) via unspecified vectors. NOTE: the vendor reportedly disputes this issue because it "could not be duplicated" and "an attacker could not remotely exploit this observed behavior to deny PLC control functions.
Exploit likelihood
What each source reports
NVD Score used
The Schneider Electric M340 PLC modules allow remote attackers to cause a denial of service (resource consumption) via unspecified vectors. NOTE: the vendor reportedly disputes this issue because it "could not be duplicated" and "an attacker could not remotely exploit this observed behavior to deny PLC control functions.
- Record
CVE-2013-2763- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-400
- Updated
- 2026-11-02
CVE List No score
The Schneider Electric M340 PLC modules allow remote attackers to cause a denial of service (resource consumption) via unspecified vectors. NOTE: the vendor reportedly disputes this issue because it "could not be duplicated" and "an attacker could not remotely exploit this observed behavior to deny PLC control functions.
- Record
CVE-2013-2763- Updated
- 2026-11-02
EUVDEUVD-2013-2702 No score
The Schneider Electric M340 PLC modules allow remote attackers to cause a denial of service (resource consumption) via unspecified vectors. NOTE: the vendor reportedly disputes this issue because it "could not be duplicated" and "an attacker could not remotely exploit this observed behavior to deny PLC control functions.
- Record
EUVD-2013-2702- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p57g-273q-f48w No score
** DISPUTED ** The Schneider Electric M340 PLC modules allow remote attackers to cause a denial...
** DISPUTED ** The Schneider Electric M340 PLC modules allow remote attackers to cause a denial of service (resource consumption) via unspecified vectors. NOTE: the vendor reportedly disputes this issue because it "could not be duplicated" and "an attacker could not remotely exploit this observed behavior to deny PLC control functions."
- Record
GHSA-p57g-273q-f48w- Weakness
- CWE-400
- Updated
- 2026-11-02
Affected products
- schneider-electric modicon m340 bmx noc 0401 firmware
- schneider-electric modicon m340 bmx noe 0100 firmware
- schneider-electric modicon m340 bmx noe 0100h firmware
- schneider-electric modicon m340 bmx noe 0110 firmware
- schneider-electric modicon m340 bmx noe 0110h firmware
- schneider-electric modicon m340 bmx nor 0200h firmware
- schneider-electric modicon m340 bmx p34-2010 firmware
- schneider-electric modicon m340 bmx p34-2030 firmware
- schneider-electric modicon m340 bmxp341000 firmware
- schneider-electric modicon m340 bmxp342010 firmware
- schneider-electric modicon m340 bmxp342020 firmware
- schneider-electric modicon m340 bmxp342030 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-2763 is a medium vulnerability (CVSS 5.0) in Schneider-electric Modicon M340 Bmx Noc 0401 Firmware, published April 4, 2013. Its validity is disputed. EPSS puts the chance of exploitation in the next 30 days at 2.13%, the 82nd percentile.