[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2q0u87NswMUUExQj5g-7mQW5rqMWfvu0D8Ols6JaWKw":3,"g5a-ex:schneider-electric\u002Fmodicon_m340_bmxp342030_firmware@*":116,"g5a-family:schneider-electric\u002Fmodicon_m340_bmxp342030_firmware":118},{"success":4,"data":5},true,{"product":6,"versions":25,"topVulnerabilitiesByEpss":30,"kevVulnerabilities":93,"seoMetadata":94,"meta":113},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":24},"schneider-electric","modicon_m340_bmxp342030_firmware",4,13,0,"2024-02-14",[14,18,20,22],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"2.8",1,false,{"version":19,"cve_count":11,"kev_count":11,"has_kev":17},"3.40",{"version":21,"cve_count":11,"kev_count":11,"has_kev":17},"3.50",{"version":23,"cve_count":11,"kev_count":11,"has_kev":17},"3.60","Modicon M340 Bmxp342030 Firmware by Schneider-electric is a technology product with 4 tracked versions and 13 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[26,27,28,29],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":11,"kev_count":11,"has_kev":17},{"version":21,"cve_count":11,"kev_count":11,"has_kev":17},{"version":23,"cve_count":11,"kev_count":11,"has_kev":17},[31,39,47,54,61,66,72,77,83,88],{"cveId":32,"description":33,"publishedDate":34,"cvssScore":35,"cvssVersion":36,"severity":37,"isKev":17,"epssScore":38},"CVE-2014-0754","Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 140NOC78x Exec before 1.62, 140NOE77x Exec before 6.2, BMXNOC0401 before 2.05, BMXNOE0100 before 2.9, BMXNOE0110x Exec before 6.0, TSXETC101 Exec before 2.04, TSXETY4103x Exec before 5.7, TSXETY5103x Exec before 5.9, TSXP57x ETYPort Exec before 5.7, and TSXP57x Ethernet Copro Exec before 5.5 allows remote attackers to visit arbitrary resources via a crafted HTTP request.","2014-10-03",10,"v2","Critical",0.09513,{"cveId":40,"description":41,"publishedDate":42,"cvssScore":43,"cvssVersion":44,"severity":45,"isKev":17,"epssScore":46},"CVE-2017-6017","A Resource Exhaustion issue was discovered in Schneider Electric Modicon M340 PLC BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP341000, BMXP342000, BMXP3420102, BMXP3420102CL, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, and BMXP342030H. A remote attacker could send a specially crafted set of packets to the PLC causing it to freeze, requiring the operator to physically press the reset button on the PLC in order to recover.","2017-06-30",7.5,"v3.0","High",0.04807,{"cveId":48,"description":49,"publishedDate":50,"cvssScore":51,"cvssVersion":36,"severity":52,"isKev":17,"epssScore":53},"CVE-2013-2763","The Schneider Electric M340 PLC modules allow remote attackers to cause a denial of service (resource consumption) via unspecified vectors.  NOTE: the vendor reportedly disputes this issue because it \"could not be duplicated\" and \"an attacker could not remotely exploit this observed behavior to deny PLC control functions.","2013-04-04",5,"Medium",0.02133,{"cveId":55,"description":56,"publishedDate":57,"cvssScore":58,"cvssVersion":59,"severity":37,"isKev":17,"epssScore":60},"CVE-2022-45789","A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbus functions on the controller when hijacking an authenticated Modbus session. Affected Products: EcoStruxure Control Expert (All Versions), EcoStruxure Process Expert (All Versions), Modicon M340 CPU - part numbers BMXP34* (All Versions), Modicon M580 CPU - part numbers BMEP* and BMEH* (All Versions), Modicon M580 CPU Safety - part numbers BMEP58*S and BMEH58*S (All Versions)\n\n","2023-01-31",9.8,"v3.1",0.01455,{"cveId":62,"description":63,"publishedDate":64,"cvssScore":58,"cvssVersion":59,"severity":37,"isKev":17,"epssScore":65},"CVE-2022-45788","A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when a malicious project file is loaded onto the controller. Affected Products: EcoStruxure Control Expert (All Versions), EcoStruxure Process Expert (All Versions), Modicon M340 CPU - part numbers BMXP34* (All Versions), Modicon M580 CPU - part numbers BMEP* and BMEH* (All Versions), Modicon M580 CPU Safety - part numbers BMEP58*S and BMEH58*S (All Versions), Modicon Momentum Unity M1E Processor - 171CBU* (All Versions), Modicon MC80 - BMKC80 (All Versions), Legacy Modicon Quantum - 140CPU65* and Premium CPUs - TSXP57* (All Versions)\n\n","2023-01-30",0.01173,{"cveId":67,"description":68,"publishedDate":69,"cvssScore":70,"cvssVersion":59,"severity":37,"isKev":17,"epssScore":71},"CVE-2021-22779","Authentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Control Expert V15.0 SP1, EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), SCADAPack RemoteConnect for x70 (all versions), Modicon M580 CPU (all versions - part numbers BMEP* and BMEH*), Modicon M340 CPU (all versions - part numbers BMXP34*), that could cause unauthorized access in read and write mode to the controller by spoofing the Modbus communication between the engineering software and the controller.","2021-07-14",9.1,0.01051,{"cveId":73,"description":74,"publishedDate":75,"cvssScore":43,"cvssVersion":59,"severity":45,"isKev":17,"epssScore":76},"CVE-2022-22724","A CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of service on ports 80 (HTTP) and 502 (Modbus), when sending a large number of TCP RST or FIN packets to any open TCP port of the PLC. Affected Product: Modicon M340 CPUs: BMXP34 (All Versions)","2022-02-04",0.0093,{"cveId":78,"description":79,"publishedDate":80,"cvssScore":81,"cvssVersion":44,"severity":52,"isKev":17,"epssScore":82},"CVE-2015-6461","Remote file inclusion allows an attacker to craft a specific URL referencing the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, or BMXP342030H PLC web server, which, when launched, will result in the browser redirecting to a remote file via a Java script loaded with the web page.","2019-03-21",5.4,0.00871,{"cveId":84,"description":85,"publishedDate":86,"cvssScore":58,"cvssVersion":59,"severity":37,"isKev":17,"epssScore":87},"CVE-2022-37300","A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists that could cause unauthorized access in read and write mode to the controller when communicating over Modbus. Affected Products: EcoStruxure Control Expert Including all Unity Pro versions (former name of EcoStruxure Control Expert) (V15.0 SP1 and prior), EcoStruxure Process Expert, Including all versions of EcoStruxure Hybrid DCS (former name of EcoStruxure Process Expert) (V2021 and prior), Modicon M340 CPU (part numbers BMXP34*) (V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*) (V3.20 and prior).","2022-09-12",0.00768,{"cveId":89,"description":90,"publishedDate":91,"cvssScore":43,"cvssVersion":59,"severity":45,"isKev":17,"epssScore":92},"CVE-2021-22786","A CWE-200: Information Exposure vulnerability exists that could cause the exposure of sensitive information stored on the memory of the controller when communicating over the Modbus TCP protocol. Affected Products: Modicon M340 CPU (part numbers BMXP34*) (Versions prior to V3.30), Modicon M580 CPU (part numbers BMEP* and BMEH*) (Versions prior to SV3.20), Modicon MC80 (BMKC80) (Versions prior to V1.6), Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) (All Versions), Modicon Momentum MDI (171CBU*) (Versions prior to V2.3), Legacy Modicon Quantum (All Versions)","2023-02-01",0.0063,[],{"title":95,"metaDescription":96,"keywords":97,"structuredData":98},"Modicon M340 Bmxp342030 Firmware by Schneider-electric - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Modicon M340 Bmxp342030 Firmware by Schneider-electric covering 4 versions with 13 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Modicon M340 Bmxp342030 Firmware vulnerabilities, Modicon M340 Bmxp342030 Firmware security, Modicon M340 Bmxp342030 Firmware CVE, Schneider-electric Modicon M340 Bmxp342030 Firmware, Modicon M340 Bmxp342030 Firmware threat intelligence, Schneider-electric security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":99,"@type":100,"name":101,"description":96,"url":102,"manufacturer":103,"applicationCategory":107,"softwareVersion":108,"mainEntity":109},"https:\u002F\u002Fschema.org","SoftwareApplication","Modicon M340 Bmxp342030 Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fschneider-electric\u002Fmodicon_m340_bmxp342030_firmware",{"@type":104,"name":105,"url":106},"Organization","Schneider-electric","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fschneider-electric","Security Software","4 versions tracked",{"@type":110,"name":111,"description":112,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Modicon M340 Bmxp342030 Firmware Security Vulnerabilities","Security vulnerabilities affecting Modicon M340 Bmxp342030 Firmware by Schneider-electric",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":114,"apiVersion":115},"2026-10-19T05:15:52.518Z","3.0",{"rows":117,"total":11,"capped":17,"failed":11},[],[]]