Product by Schneider Electric

    Modicon M340 Bmxp3420302h Firmware

    16 known vulnerabilities in Modicon M340 Bmxp3420302h Firmware (Schneider Electric), 0 of them actively exploited (CISA KEV).

    Key figures

    16

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    7

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority.

    Vulnerabilities in Modicon M340 Bmxp3420302h Firmware (Schneider Electric)
    SeverityCVETitleCVSSPublished
    CriticalCVE-2018-7241

    Schneider-Electric 140CPU31110 Firmware: security vulnerability

    		9.8
    HighCVE-2017-6017

    Schneider Electric Modicon M340 PLC: Uncontrolled Resource Consumption

    		7.5
    CriticalCVE-2018-7761

    Schneider-Electric 140CPU31110 Firmware: Code Execution

    		9.8
    CriticalCVE-2018-7242

    Schneider-Electric 140CPU31110 Firmware: security vulnerability

    		9.8
    CriticalCVE-2018-7760

    Schneider-Electric 140CPU31110 Firmware: security vulnerability

    		9.8
    CriticalCVE-2022-45789

    Schneider Electric EcoStruxure Control Expert: Authentication Bypass by Capture-replay

    		8.1
    HighCVE-2018-7759

    Schneider-Electric 140CPU31110 Firmware: Buffer Overflow

    		7.5
    HighCVE-2018-7762

    Schneider-Electric 140CPU31110 Firmware: Buffer Overflow

    		7.5
    CriticalCVE-2022-45788

    Schneider Electric EcoStruxure Control Expert: Improper Check for Unusual or Exceptional Conditions

    		7.5
    CriticalCVE-2022-37300

    Schneider Electric EcoStruxure Control Expert: Weak Password Recovery Mechanism for Forgotten Password

    		9.8
    Not ratedCVE-2014-0754

    Schneider Electric

    		—
    HighCVE-2021-22786

    Schneider Electric Modicon M340 CPU (part numbers BMXP34*): Exposure of Sensitive Information to an Unauthorized Actor

    		7.5
    HighCVE-2022-0222

    Schneider Electric Modicon M340 CPUs: Improper Privilege Management

    		7.5
    MediumCVE-2015-6461

    Schneider Electric Modicon PLC: PHP Remote File Inclusion

    		5.4
    HighCVE-2023-6408

    Schneider Electric Modicon M340 CPU (part numbers BMXP34*): Improper Enforcement of Message Integrity During Transmission in a Communication Channel

    		8.1
    MediumCVE-2015-6462

    Schneider Electric Modicon PLC: Cross-site Scripting

    		5.4

    All products by Schneider Electric