Product by Schneider Electric
Modicon M340 Bmxp3420102 Firmware
25 known vulnerabilities in Modicon M340 Bmxp3420102 Firmware (Schneider Electric), 0 of them actively exploited (CISA KEV).
Key figures
25
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
9
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2018-7241 | Schneider-Electric 140CPU31110 Firmware: security vulnerability | 9.8 | |
| High | CVE-2017-6017 | Schneider Electric Modicon M340 PLC: Uncontrolled Resource Consumption | 7.5 | |
| Critical | CVE-2020-7533 | Schneider-Electric 140CPU65260 Firmware: Improper Authentication | 9.8 | |
| Critical | CVE-2020-7540 | Schneider-Electric 140CPU65150 Firmware: Missing Authentication for Critical Function | 9.8 | |
| Critical | CVE-2018-7761 | Schneider-Electric 140CPU31110 Firmware: Code Execution | 9.8 | |
| Critical | CVE-2018-7242 | Schneider-Electric 140CPU31110 Firmware: security vulnerability | 9.8 | |
| Critical | CVE-2018-7760 | Schneider-Electric 140CPU31110 Firmware: security vulnerability | 9.8 | |
| Critical | CVE-2022-45789 | Schneider Electric EcoStruxure Control Expert: Authentication Bypass by Capture-replay | 8.1 | |
| High | CVE-2020-7535 | Schneider-Electric 140CPU65150 Firmware: Path Traversal | 7.5 | |
| High | CVE-2020-7537 | Schneider Electric Modicon M340 Bmxp341000 Firmware: Improper Check for Unusual or Exceptional Conditions | 7.5 | |
| High | CVE-2020-7542 | Schneider-Electric 140CPU65150 Firmware: Improper Check for Unusual or Exceptional Conditions | 7.5 | |
| High | CVE-2020-7543 | Schneider Electric Modicon M340 Bmxp341000 Firmware: Improper Check for Unusual or Exceptional Conditions | 7.5 | |
| High | CVE-2018-7759 | Schneider-Electric 140CPU31110 Firmware: Buffer Overflow | 7.5 | |
| High | CVE-2018-7762 | Schneider-Electric 140CPU31110 Firmware: Buffer Overflow | 7.5 | |
| Critical | CVE-2022-45788 | Schneider Electric EcoStruxure Control Expert: Improper Check for Unusual or Exceptional Conditions | 7.5 | |
| Critical | CVE-2022-37300 | Schneider Electric EcoStruxure Control Expert: Weak Password Recovery Mechanism for Forgotten Password | 9.8 | |
| High | CVE-2020-7539 | Schneider-Electric 140CPU65150 Firmware: Improper Check for Unusual or Exceptional Conditions | 7.5 | |
| High | CVE-2020-7536 | Schneider Electric Bmxnoe0100 Firmware: Improper Check for Unusual or Exceptional Conditions | 7.5 | |
| High | CVE-2022-22724 | Schneider Electric Modicon M340 Bmxp341000 Firmware: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2019-6855 | Schneider Electric Ecostruxure Control Expert: Incorrect Authorization | 7.3 | |
| High | CVE-2020-7549 | Schneider-Electric 140CPU65150 Firmware: Improper Check for Unusual or Exceptional Conditions | 5.3 | |
| High | CVE-2021-22786 | Schneider Electric Modicon M340 CPU (part numbers BMXP34*): Exposure of Sensitive Information to an Unauthorized Actor | 7.5 | |
| High | CVE-2022-0222 | Schneider Electric Modicon M340 CPUs: Improper Privilege Management | 7.5 | |
| Medium | CVE-2020-7541 | Schneider-Electric 140CPU65150 Firmware: Forced Browsing | 5.3 | |
| High | CVE-2023-6408 | Schneider Electric Modicon M340 CPU (part numbers BMXP34*): Improper Enforcement of Message Integrity During Transmission in a Communication Channel | 8.1 |