[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f6OIN61NUQmxF_solQXZoFTEw2eWvCE6WPRECAiDExnI":3,"g5a-ex:schneider-electric\u002Fmodicon_m340_bmxp342030@*":102,"g5a-family:schneider-electric\u002Fmodicon_m340_bmxp342030":104},{"success":4,"data":5},true,{"product":6,"versions":14,"topVulnerabilitiesByEpss":15,"kevVulnerabilities":79,"seoMetadata":80,"meta":99},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":13},"schneider-electric","modicon_m340_bmxp342030",0,18,"2024-02-14",[],"Modicon M340 Bmxp342030 by Schneider-electric is a technology product and 18 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[16,25,30,38,45,52,57,63,68,73],{"cveId":17,"description":18,"publishedDate":19,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":24},"CVE-2014-0754","Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 140NOC78x Exec before 1.62, 140NOE77x Exec before 6.2, BMXNOC0401 before 2.05, BMXNOE0100 before 2.9, BMXNOE0110x Exec before 6.0, TSXETC101 Exec before 2.04, TSXETY4103x Exec before 5.7, TSXETY5103x Exec before 5.9, TSXP57x ETYPort Exec before 5.7, and TSXP57x Ethernet Copro Exec before 5.5 allows remote attackers to visit arbitrary resources via a crafted HTTP request.","2014-10-03",10,"v2","Critical",false,0.09513,{"cveId":26,"description":27,"publishedDate":28,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":29},"CVE-2015-7937","Stack-based buffer overflow in the GoAhead Web Server on Schneider Electric Modicon M340 PLC BMXNOx and BMXPx devices allows remote attackers to execute arbitrary code via a long password in HTTP Basic Authentication data.","2015-12-21",0.07351,{"cveId":31,"description":32,"publishedDate":33,"cvssScore":34,"cvssVersion":35,"severity":36,"isKev":23,"epssScore":37},"CVE-2017-6017","A Resource Exhaustion issue was discovered in Schneider Electric Modicon M340 PLC BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP341000, BMXP342000, BMXP3420102, BMXP3420102CL, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, and BMXP342030H. A remote attacker could send a specially crafted set of packets to the PLC causing it to freeze, requiring the operator to physically press the reset button on the PLC in order to recover.","2017-06-30",7.5,"v3.0","High",0.04807,{"cveId":39,"description":40,"publishedDate":41,"cvssScore":42,"cvssVersion":21,"severity":43,"isKev":23,"epssScore":44},"CVE-2013-2763","The Schneider Electric M340 PLC modules allow remote attackers to cause a denial of service (resource consumption) via unspecified vectors.  NOTE: the vendor reportedly disputes this issue because it \"could not be duplicated\" and \"an attacker could not remotely exploit this observed behavior to deny PLC control functions.","2013-04-04",5,"Medium",0.02133,{"cveId":46,"description":47,"publishedDate":48,"cvssScore":49,"cvssVersion":50,"severity":22,"isKev":23,"epssScore":51},"CVE-2022-45789","A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbus functions on the controller when hijacking an authenticated Modbus session. Affected Products: EcoStruxure Control Expert (All Versions), EcoStruxure Process Expert (All Versions), Modicon M340 CPU - part numbers BMXP34* (All Versions), Modicon M580 CPU - part numbers BMEP* and BMEH* (All Versions), Modicon M580 CPU Safety - part numbers BMEP58*S and BMEH58*S (All Versions)\n\n","2023-01-31",9.8,"v3.1",0.01455,{"cveId":53,"description":54,"publishedDate":55,"cvssScore":49,"cvssVersion":50,"severity":22,"isKev":23,"epssScore":56},"CVE-2022-45788","A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when a malicious project file is loaded onto the controller. Affected Products: EcoStruxure Control Expert (All Versions), EcoStruxure Process Expert (All Versions), Modicon M340 CPU - part numbers BMXP34* (All Versions), Modicon M580 CPU - part numbers BMEP* and BMEH* (All Versions), Modicon M580 CPU Safety - part numbers BMEP58*S and BMEH58*S (All Versions), Modicon Momentum Unity M1E Processor - 171CBU* (All Versions), Modicon MC80 - BMKC80 (All Versions), Legacy Modicon Quantum - 140CPU65* and Premium CPUs - TSXP57* (All Versions)\n\n","2023-01-30",0.01173,{"cveId":58,"description":59,"publishedDate":60,"cvssScore":61,"cvssVersion":50,"severity":22,"isKev":23,"epssScore":62},"CVE-2021-22779","Authentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Control Expert V15.0 SP1, EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), SCADAPack RemoteConnect for x70 (all versions), Modicon M580 CPU (all versions - part numbers BMEP* and BMEH*), Modicon M340 CPU (all versions - part numbers BMXP34*), that could cause unauthorized access in read and write mode to the controller by spoofing the Modbus communication between the engineering software and the controller.","2021-07-14",9.1,0.01051,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":34,"cvssVersion":50,"severity":36,"isKev":23,"epssScore":67},"CVE-2021-22792","A CWE-476: NULL Pointer Dereference vulnerability that could cause a Denial of Service on the Modicon PLC controller \u002F simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU (part numbers BMEP* and BMEH*, all versions), Modicon M340 CPU (part numbers BMXP34*, all versions), Modicon MC80 (part numbers BMKC80*, all versions), Modicon Momentum Ethernet CPU (part numbers 171CBU*, all versions), PLC Simulator for EcoStruxureª Control Expert, including all Unity Pro versions (former name of EcoStruxureª Control Expert, all versions), PLC Simulator for EcoStruxureª Process Expert including all HDCS versions (former name of EcoStruxureª Process Expert, all versions), Modicon Quantum CPU (part numbers 140CPU*, all versions), Modicon Premium CPU (part numbers TSXP5*, all versions).","2021-09-02",0.00937,{"cveId":69,"description":70,"publishedDate":71,"cvssScore":34,"cvssVersion":50,"severity":36,"isKev":23,"epssScore":72},"CVE-2022-22724","A CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of service on ports 80 (HTTP) and 502 (Modbus), when sending a large number of TCP RST or FIN packets to any open TCP port of the PLC. Affected Product: Modicon M340 CPUs: BMXP34 (All Versions)","2022-02-04",0.0093,{"cveId":74,"description":75,"publishedDate":76,"cvssScore":77,"cvssVersion":35,"severity":43,"isKev":23,"epssScore":78},"CVE-2015-6461","Remote file inclusion allows an attacker to craft a specific URL referencing the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, or BMXP342030H PLC web server, which, when launched, will result in the browser redirecting to a remote file via a Java script loaded with the web page.","2019-03-21",5.4,0.00871,[],{"title":81,"metaDescription":82,"keywords":83,"structuredData":84},"Modicon M340 Bmxp342030 by Schneider-electric - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Modicon M340 Bmxp342030 by Schneider-electric with 18 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Modicon M340 Bmxp342030 vulnerabilities, Modicon M340 Bmxp342030 security, Modicon M340 Bmxp342030 CVE, Schneider-electric Modicon M340 Bmxp342030, Modicon M340 Bmxp342030 threat intelligence, Schneider-electric security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":85,"@type":86,"name":87,"description":82,"url":88,"manufacturer":89,"applicationCategory":93,"softwareVersion":94,"mainEntity":95},"https:\u002F\u002Fschema.org","SoftwareApplication","Modicon M340 Bmxp342030","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fschneider-electric\u002Fmodicon_m340_bmxp342030",{"@type":90,"name":91,"url":92},"Organization","Schneider-electric","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fschneider-electric","Security Software","Multiple versions",{"@type":96,"name":97,"description":98,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Modicon M340 Bmxp342030 Security Vulnerabilities","Security vulnerabilities affecting Modicon M340 Bmxp342030 by Schneider-electric",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":100,"apiVersion":101},"2026-10-19T04:35:23.493Z","3.0",{"rows":103,"total":9,"capped":23,"failed":9},[],[105],{"product":106,"cves":107},"modicon_m340_bmxp342030_firmware",13]