[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fnyGXGqwXsfsFLiNhlktrSB9bbZUTc7Cb1DcRWo2au-k":3,"g5a-ex:schneider-electric\u002Fmodicon_m340_bmxp341000@*":95,"g5a-family:schneider-electric\u002Fmodicon_m340_bmxp341000":97},{"success":4,"data":5},true,{"product":6,"versions":14,"topVulnerabilitiesByEpss":15,"kevVulnerabilities":72,"seoMetadata":73,"meta":92},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":13},"schneider-electric","modicon_m340_bmxp341000",0,33,"2024-02-14",[],"Modicon M340 Bmxp341000 by Schneider-electric is a technology product and 33 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[16,25,32,38,43,51,55,59,63,67],{"cveId":17,"description":18,"publishedDate":19,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":24},"CVE-2017-6017","A Resource Exhaustion issue was discovered in Schneider Electric Modicon M340 PLC BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP341000, BMXP342000, BMXP3420102, BMXP3420102CL, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, and BMXP342030H. A remote attacker could send a specially crafted set of packets to the PLC causing it to freeze, requiring the operator to physically press the reset button on the PLC in order to recover.","2017-06-30",7.5,"v3.0","High",false,0.04807,{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":21,"severity":30,"isKev":23,"epssScore":31},"CVE-2018-7241","Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules.","2018-04-18",9.8,"Critical",0.03697,{"cveId":33,"description":34,"publishedDate":35,"cvssScore":29,"cvssVersion":36,"severity":30,"isKev":23,"epssScore":37},"CVE-2020-7533","CWE-287: Improper Authentication vulnerability exists which could cause the execution of\ncommands on the webserver without authentication when sending specially crafted HTTP\nrequests.","2020-12-01","v3.1",0.02336,{"cveId":39,"description":40,"publishedDate":41,"cvssScore":29,"cvssVersion":36,"severity":30,"isKev":23,"epssScore":42},"CVE-2020-7540","A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause unauthenticated command execution in the controller when sending special HTTP requests.","2020-12-11",0.02317,{"cveId":44,"description":45,"publishedDate":46,"cvssScore":47,"cvssVersion":48,"severity":49,"isKev":23,"epssScore":50},"CVE-2013-2763","The Schneider Electric M340 PLC modules allow remote attackers to cause a denial of service (resource consumption) via unspecified vectors.  NOTE: the vendor reportedly disputes this issue because it \"could not be duplicated\" and \"an attacker could not remotely exploit this observed behavior to deny PLC control functions.","2013-04-04",5,"v2","Medium",0.02133,{"cveId":52,"description":53,"publishedDate":28,"cvssScore":29,"cvssVersion":21,"severity":30,"isKev":23,"epssScore":54},"CVE-2018-7761","A vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow arbitrary code execution.",0.02098,{"cveId":56,"description":57,"publishedDate":28,"cvssScore":29,"cvssVersion":21,"severity":30,"isKev":23,"epssScore":58},"CVE-2018-7242","Vulnerable hash algorithms exists in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules. The algorithm used to encrypt the password is vulnerable to hash collision attacks.",0.01884,{"cveId":60,"description":61,"publishedDate":41,"cvssScore":20,"cvssVersion":36,"severity":22,"isKev":23,"epssScore":62},"CVE-2020-7535","A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal' Vulnerability Type) vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause disclosure of information when sending a specially crafted request to the controller over HTTP.",0.01494,{"cveId":64,"description":65,"publishedDate":28,"cvssScore":29,"cvssVersion":21,"severity":30,"isKev":23,"epssScore":66},"CVE-2018-7760","An authorization bypass vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. Requests to CGI functions allow malicious users to bypass authorization.",0.01469,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":29,"cvssVersion":36,"severity":30,"isKev":23,"epssScore":71},"CVE-2022-45789","A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbus functions on the controller when hijacking an authenticated Modbus session. Affected Products: EcoStruxure Control Expert (All Versions), EcoStruxure Process Expert (All Versions), Modicon M340 CPU - part numbers BMXP34* (All Versions), Modicon M580 CPU - part numbers BMEP* and BMEH* (All Versions), Modicon M580 CPU Safety - part numbers BMEP58*S and BMEH58*S (All Versions)\n\n","2023-01-31",0.01455,[],{"title":74,"metaDescription":75,"keywords":76,"structuredData":77},"Modicon M340 Bmxp341000 by Schneider-electric - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Modicon M340 Bmxp341000 by Schneider-electric with 33 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Modicon M340 Bmxp341000 vulnerabilities, Modicon M340 Bmxp341000 security, Modicon M340 Bmxp341000 CVE, Schneider-electric Modicon M340 Bmxp341000, Modicon M340 Bmxp341000 threat intelligence, Schneider-electric security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":78,"@type":79,"name":80,"description":75,"url":81,"manufacturer":82,"applicationCategory":86,"softwareVersion":87,"mainEntity":88},"https:\u002F\u002Fschema.org","SoftwareApplication","Modicon M340 Bmxp341000","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fschneider-electric\u002Fmodicon_m340_bmxp341000",{"@type":83,"name":84,"url":85},"Organization","Schneider-electric","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fschneider-electric","Security Software","Multiple versions",{"@type":89,"name":90,"description":91,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Modicon M340 Bmxp341000 Security Vulnerabilities","Security vulnerabilities affecting Modicon M340 Bmxp341000 by Schneider-electric",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":93,"apiVersion":94},"2026-10-19T04:23:21.908Z","3.0",{"rows":96,"total":9,"capped":23,"failed":9},[],[98],{"product":99,"cves":100},"modicon_m340_bmxp341000_firmware",27]