Skip to contentSchneider-electric Modicon M340 Bmxp342020 Firmware vulnerabilities
- schneider electric ecostruxure control expert, ecostruxure process expert, modicon m340 cpu (part numbers bmxp34*) +46 more +48 moreCWE-924: Improper Enforcement of Message Integrity During Transmission in a
Communication...CVE-2023-64088.1 High
- schneider electric legacy modicon quantum, modicon m340 cpu (part numbers bmxp34*), modicon m580 cpu (part numbers bmep* and bmeh*) +44 more +46 moreA CWE-200: Information Exposure vulnerability exists that could cause the exposure of sensitive...CVE-2021-227867.5 High
- schneider electric ecostruxure control expert, ecostruxure process expert, modicon m340 cpu (part numbers bmxp34*) +37 more +39 moreA CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause...CVE-2022-457898.1 High
- schneider electric ecostruxure control expert, ecostruxure process expert, legacy modicon quantum (140cpu65*) and premium cpus (tsxp57*) +58 more +60 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could...CVE-2022-457887.5 High
- schneider electric modicon m340 cpus, modicon m340 x80 ethernet communication modules: bmxnoe0100 (h) bmxnoe0110 (h) bmxnor0200h rtu, schneider-electric modicon m340 bmxnoe0100 firmware +13 more +15 moreA CWE-269: Improper Privilege Management vulnerability exists that could cause a denial of...CVE-2022-02227.5 High
- schneider electric ecostruxure control expert, ecostruxure process expert, modicon m340 cpu +35 more +37 moreA CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists that...CVE-2022-373009.8 Critical
- schneider-electric 140cpu65150 firmware, 140noc77101 firmware, 140noc78x00 firmware +11 more +13 moreA CWE-787: Out-of-bounds Write vulnerability exists that could cause denial of service when an...CVE-2021-227887.5 High
- schneider-electric 140cpu65150 firmware, 140noc77101 firmware, 140noc78x00 firmware +11 more +13 moreA CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of...CVE-2021-227877.5 High
- schneider-electric 140cpu65150 firmware, 140noc77101 firmware, 140noc78x00 firmware +11 more +13 moreA CWE-200: Information Exposure vulnerability exists that could cause sensitive information of...CVE-2021-227857.5 High
- schneider-electric 140cpu65 firmware, 140noc78000 firmware, 140noe77111 firmware +7 more +9 moreA CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists on the web server used, that...CVE-2020-75348.8 High
- schneider-electric ecostruxure control expert, ecostruxure process expert, remoteconnect +29 more +31 moreAuthentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert (all...CVE-2021-227799.1 Critical
- schneider-electric 140cpu65150 firmware, 140noc78000 firmware, 140noc78100 firmware +16 more +18 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web...CVE-2020-75495.3 Medium
- schneider-electric modicon m340 bmxp341000 firmware, modicon m340 bmxp342000 firmware, modicon m340 bmxp3420102 firmware +13 more +15 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon...CVE-2020-75437.5 High
- schneider-electric 140cpu65150 firmware, modicon m340 bmxp341000 firmware, modicon m340 bmxp342000 firmware +17 more +19 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon...CVE-2020-75427.5 High
- schneider-electric 140cpu65150 firmware, 140noc77101 firmware, 140noc78000 firmware +17 more +19 moreA CWE-425: Direct Request ('Forced Browsing') vulnerability exists in the Web Server on Modicon...CVE-2020-75415.3 Medium
- schneider-electric 140cpu65150 firmware, 140cpu65160 firmware, 140noc77101 firmware +20 more +22 moreA CWE-306: Missing Authentication for Critical Function vulnerability exists in the Web Server on...CVE-2020-75409.8 Critical
- schneider-electric 140cpu65150 firmware, 140noc77101 firmware, 140noc78000 firmware +17 more +19 moreA CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web...CVE-2020-75397.5 High
- schneider-electric modicon m340 bmxp341000 firmware, modicon m340 bmxp342000 firmware, modicon m340 bmxp3420102 firmware +16 more +18 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon...CVE-2020-75377.5 High
- schneider-electric 140cpu65150 firmware, 140cpu65160 firmware, 140noc77101 firmware +18 more +20 moreA CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'...CVE-2020-75357.5 High
- schneider-electric bmxnoe0100 firmware, bmxnoe0110 firmware, bmxnor0200h firmware +7 more +9 moreA CWE-754:Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon...CVE-2020-75367.5 High
- schneider-electric ecostruxure control expert, unity pro, modicon m340 bmxp341000 firmware +20 more +22 moreAn Improper Authorization - CWE-285 vulnerability exists in EcoStruxure? Control Expert V14.0 and...CVE-2019-68557.3 High
- schneider-electric bmxnoc0401 firmware, bmxnoe0100 firmware, bmxnoe0110 firmware +8 more +10 moreReflected Cross-Site Scripting (nonpersistent) allows an attacker to craft a specific URL, which...CVE-2015-64625.4 Medium
- schneider-electric bmxnoc0401 firmware, bmxnoe0100 firmware, bmxnoe0110 firmware +8 more +10 moreRemote file inclusion allows an attacker to craft a specific URL referencing the Schneider...CVE-2015-64615.4 Medium
- schneider electric se modicon m340, modicon premium, modicon quantum, bmxnor0203, schneider-electric 140cpu31110 firmware, 140cpu31110c firmware +55 more +57 moreA vulnerability exists in the web services to process SOAP requests in Schneider Electric's...CVE-2018-77627.5 High
- schneider electric se modicon m340, modicon premium, modicon quantum, bmxnor0202, schneider-electric 140cpu31110 firmware, 140cpu31110c firmware +55 more +57 moreA vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, Modicon...CVE-2018-77619.8 Critical
- schneider electric se modicon m340, modicon premium, modicon quantum, bmxnor0201, schneider-electric 140cpu31110 firmware, 140cpu31110c firmware +55 more +57 moreAn authorization bypass vulnerability exists in Schneider Electric's Modicon M340, Modicon...CVE-2018-77609.8 Critical
- schneider electric se modicon m340, modicon premium, modicon quantum, bmxnor0200, schneider-electric 140cpu31110 firmware, 140cpu31110c firmware +55 more +57 moreA buffer overflow vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium,...CVE-2018-77597.5 High
- schneider electric se modicon premium, modicon quantum, modicon m340, bmxnor0200, schneider-electric 140cpu31110 firmware, 140cpu31110c firmware +55 more +57 moreVulnerable hash algorithms exists in Schneider Electric's Modicon Premium, Modicon Quantum,...CVE-2018-72429.8 Critical
- schneider electric se modicon premium, modicon quantum, modicon m340, bmxnor0200, schneider-electric 140cpu31110 firmware, 140cpu31110c firmware +55 more +57 moreHard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340,...CVE-2018-72419.8 Critical
- schneider-electric bmxnoc0401 firmware, bmxnoe0100 firmware, bmxnoe0110 firmware +12 more +14 moreA Resource Exhaustion issue was discovered in Schneider Electric Modicon M340 PLC BMXNOC0401,...CVE-2017-60177.5 High
- schneider electric ethernet modules for m340, quantum and premium plc ranges, schneider-electric 171ccc96020 firmware, 171ccc96020c firmware +41 more +43 moreSchneider ElectricCVE-2014-075410.0
- schneider-electric modicon m340 bmx noc 0401 firmware, modicon m340 bmx noe 0100 firmware, modicon m340 bmx noe 0100h firmware +9 more +11 more** DISPUTED ** The Schneider Electric M340 PLC modules allow remote attackers to cause a denial...CVE-2013-2763Disputed5.0 Medium