[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fHeBeorwcWrYfFqutcs2cDDiUHmDsFg3lkoZD6U6EKl8":3,"g5a-ex:schneider-electric\u002Fmodicon_m340_bmxp342020@*":96,"g5a-family:schneider-electric\u002Fmodicon_m340_bmxp342020":98},{"success":4,"data":5},true,{"product":6,"versions":14,"topVulnerabilitiesByEpss":15,"kevVulnerabilities":73,"seoMetadata":74,"meta":93},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":13},"schneider-electric","modicon_m340_bmxp342020",0,39,"2024-02-14",[],"Modicon M340 Bmxp342020 by Schneider-electric is a technology product and 39 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[16,25,30,38,44,50,57,61,65,69],{"cveId":17,"description":18,"publishedDate":19,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":24},"CVE-2014-0754","Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 140NOC78x Exec before 1.62, 140NOE77x Exec before 6.2, BMXNOC0401 before 2.05, BMXNOE0100 before 2.9, BMXNOE0110x Exec before 6.0, TSXETC101 Exec before 2.04, TSXETY4103x Exec before 5.7, TSXETY5103x Exec before 5.9, TSXP57x ETYPort Exec before 5.7, and TSXP57x Ethernet Copro Exec before 5.5 allows remote attackers to visit arbitrary resources via a crafted HTTP request.","2014-10-03",10,"v2","Critical",false,0.09513,{"cveId":26,"description":27,"publishedDate":28,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":29},"CVE-2015-7937","Stack-based buffer overflow in the GoAhead Web Server on Schneider Electric Modicon M340 PLC BMXNOx and BMXPx devices allows remote attackers to execute arbitrary code via a long password in HTTP Basic Authentication data.","2015-12-21",0.07351,{"cveId":31,"description":32,"publishedDate":33,"cvssScore":34,"cvssVersion":35,"severity":36,"isKev":23,"epssScore":37},"CVE-2017-6017","A Resource Exhaustion issue was discovered in Schneider Electric Modicon M340 PLC BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP341000, BMXP342000, BMXP3420102, BMXP3420102CL, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, and BMXP342030H. A remote attacker could send a specially crafted set of packets to the PLC causing it to freeze, requiring the operator to physically press the reset button on the PLC in order to recover.","2017-06-30",7.5,"v3.0","High",0.04807,{"cveId":39,"description":40,"publishedDate":41,"cvssScore":42,"cvssVersion":35,"severity":22,"isKev":23,"epssScore":43},"CVE-2018-7241","Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules.","2018-04-18",9.8,0.03697,{"cveId":45,"description":46,"publishedDate":47,"cvssScore":42,"cvssVersion":48,"severity":22,"isKev":23,"epssScore":49},"CVE-2020-7540","A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause unauthenticated command execution in the controller when sending special HTTP requests.","2020-12-11","v3.1",0.02317,{"cveId":51,"description":52,"publishedDate":53,"cvssScore":54,"cvssVersion":21,"severity":55,"isKev":23,"epssScore":56},"CVE-2013-2763","The Schneider Electric M340 PLC modules allow remote attackers to cause a denial of service (resource consumption) via unspecified vectors.  NOTE: the vendor reportedly disputes this issue because it \"could not be duplicated\" and \"an attacker could not remotely exploit this observed behavior to deny PLC control functions.","2013-04-04",5,"Medium",0.02133,{"cveId":58,"description":59,"publishedDate":41,"cvssScore":42,"cvssVersion":35,"severity":22,"isKev":23,"epssScore":60},"CVE-2018-7761","A vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow arbitrary code execution.",0.02098,{"cveId":62,"description":63,"publishedDate":41,"cvssScore":42,"cvssVersion":35,"severity":22,"isKev":23,"epssScore":64},"CVE-2018-7242","Vulnerable hash algorithms exists in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules. The algorithm used to encrypt the password is vulnerable to hash collision attacks.",0.01884,{"cveId":66,"description":67,"publishedDate":47,"cvssScore":34,"cvssVersion":48,"severity":36,"isKev":23,"epssScore":68},"CVE-2020-7535","A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal' Vulnerability Type) vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause disclosure of information when sending a specially crafted request to the controller over HTTP.",0.01494,{"cveId":70,"description":71,"publishedDate":41,"cvssScore":42,"cvssVersion":35,"severity":22,"isKev":23,"epssScore":72},"CVE-2018-7760","An authorization bypass vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. Requests to CGI functions allow malicious users to bypass authorization.",0.01469,[],{"title":75,"metaDescription":76,"keywords":77,"structuredData":78},"Modicon M340 Bmxp342020 by Schneider-electric - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Modicon M340 Bmxp342020 by Schneider-electric with 39 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Modicon M340 Bmxp342020 vulnerabilities, Modicon M340 Bmxp342020 security, Modicon M340 Bmxp342020 CVE, Schneider-electric Modicon M340 Bmxp342020, Modicon M340 Bmxp342020 threat intelligence, Schneider-electric security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":79,"@type":80,"name":81,"description":76,"url":82,"manufacturer":83,"applicationCategory":87,"softwareVersion":88,"mainEntity":89},"https:\u002F\u002Fschema.org","SoftwareApplication","Modicon M340 Bmxp342020","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fschneider-electric\u002Fmodicon_m340_bmxp342020",{"@type":84,"name":85,"url":86},"Organization","Schneider-electric","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fschneider-electric","Security Software","Multiple versions",{"@type":90,"name":91,"description":92,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Modicon M340 Bmxp342020 Security Vulnerabilities","Security vulnerabilities affecting Modicon M340 Bmxp342020 by Schneider-electric",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":94,"apiVersion":95},"2026-10-19T04:23:20.668Z","3.0",{"rows":97,"total":9,"capped":23,"failed":9},[],[99],{"product":100,"cves":101},"modicon_m340_bmxp342020_firmware",32]