Product by Schneider Electric
Modicon M340 Bmxp342020 Firmware
32 known vulnerabilities in Modicon M340 Bmxp342020 Firmware (Schneider Electric), 0 of them actively exploited (CISA KEV).
Key figures
32
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
9
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2018-7241 | Schneider-Electric 140CPU31110 Firmware: security vulnerability | 9.8 | |
| High | CVE-2017-6017 | Schneider Electric Modicon M340 PLC: Uncontrolled Resource Consumption | 7.5 | |
| Critical | CVE-2020-7540 | Schneider-Electric 140CPU65150 Firmware: Missing Authentication for Critical Function | 9.8 | |
| Critical | CVE-2018-7761 | Schneider-Electric 140CPU31110 Firmware: Code Execution | 9.8 | |
| Critical | CVE-2018-7242 | Schneider-Electric 140CPU31110 Firmware: security vulnerability | 9.8 | |
| Critical | CVE-2018-7760 | Schneider-Electric 140CPU31110 Firmware: security vulnerability | 9.8 | |
| Critical | CVE-2022-45789 | Schneider Electric EcoStruxure Control Expert: Authentication Bypass by Capture-replay | 8.1 | |
| High | CVE-2020-7535 | Schneider-Electric 140CPU65150 Firmware: Path Traversal | 7.5 | |
| High | CVE-2020-7537 | Schneider Electric Modicon M340 Bmxp341000 Firmware: Improper Check for Unusual or Exceptional Conditions | 7.5 | |
| Critical | CVE-2021-22779 | Schneider Electric Ecostruxure Control Expert: Authentication Bypass by Spoofing | 9.1 | |
| High | CVE-2020-7542 | Schneider-Electric 140CPU65150 Firmware: Improper Check for Unusual or Exceptional Conditions | 7.5 | |
| High | CVE-2020-7543 | Schneider Electric Modicon M340 Bmxp341000 Firmware: Improper Check for Unusual or Exceptional Conditions | 7.5 | |
| High | CVE-2018-7759 | Schneider-Electric 140CPU31110 Firmware: Buffer Overflow | 7.5 | |
| High | CVE-2018-7762 | Schneider-Electric 140CPU31110 Firmware: Buffer Overflow | 7.5 | |
| Critical | CVE-2022-45788 | Schneider Electric EcoStruxure Control Expert: Improper Check for Unusual or Exceptional Conditions | 7.5 | |
| Critical | CVE-2022-37300 | Schneider Electric EcoStruxure Control Expert: Weak Password Recovery Mechanism for Forgotten Password | 9.8 | |
| High | CVE-2020-7539 | Schneider-Electric 140CPU65150 Firmware: Improper Check for Unusual or Exceptional Conditions | 7.5 | |
| High | CVE-2020-7536 | Schneider Electric Bmxnoe0100 Firmware: Improper Check for Unusual or Exceptional Conditions | 7.5 | |
| Not rated | CVE-2014-0754 | Schneider Electric | — | |
| High | CVE-2021-22788 | Schneider-Electric 140CPU65150 Firmware: Out-of-bounds Write | 7.5 | |
| High | CVE-2021-22787 | Schneider-Electric 140CPU65150 Firmware: Improper Input Validation | 7.5 | |
| High | CVE-2021-22785 | Schneider-Electric 140CPU65150 Firmware: Exposure of Sensitive Information to an Unauthorized Actor | 7.5 | |
| High | CVE-2019-6855 | Schneider Electric Ecostruxure Control Expert: Incorrect Authorization | 7.3 | |
| High | CVE-2020-7549 | Schneider-Electric 140CPU65150 Firmware: Improper Check for Unusual or Exceptional Conditions | 5.3 | |
| High | CVE-2021-22786 | Schneider Electric Modicon M340 CPU (part numbers BMXP34*): Exposure of Sensitive Information to an Unauthorized Actor | 7.5 |