Product by Schneider Electric
Modicon M340 CPU
20 known vulnerabilities in Modicon M340 CPU (Schneider Electric), 0 of them actively exploited (CISA KEV).
Key figures
20
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
7
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2020-35198 | Oracle Communications Eagle: Integer Overflow | 9.8 | |
| Critical | CVE-2020-7540 | Schneider-Electric 140CPU65150 Firmware: Missing Authentication for Critical Function | 9.8 | |
| Critical | CVE-2021-22156 | BlackBerry QNX Software Development Platform (SDP): Integer Overflow or Wraparound | 9.0 | |
| Critical | CVE-2022-45789 | Schneider Electric EcoStruxure Control Expert: Authentication Bypass by Capture-replay | 8.1 | |
| High | CVE-2020-28895 | integer overflow in calloc | 7.3 | |
| Critical | CVE-2021-22779 | Schneider Electric Ecostruxure Control Expert: Authentication Bypass by Spoofing | 9.1 | |
| Critical | CVE-2022-45788 | Schneider Electric EcoStruxure Control Expert: Improper Check for Unusual or Exceptional Conditions | 7.5 | |
| Critical | CVE-2022-37300 | Schneider Electric EcoStruxure Control Expert: Weak Password Recovery Mechanism for Forgotten Password | 9.8 | |
| High | CVE-2020-7539 | Schneider-Electric 140CPU65150 Firmware: Improper Check for Unusual or Exceptional Conditions | 7.5 | |
| High | CVE-2021-22792 | Schneider Electric Modicon M340 Bmxp341000: NULL Pointer Dereference | 7.5 | |
| High | CVE-2022-37301 | Schneider Electric Modicon M340 CPU (part numbers BMXP34*): Integer Underflow (Wrap or Wraparound) | 7.5 | |
| High | CVE-2021-22786 | Schneider Electric Modicon M340 CPU (part numbers BMXP34*): Exposure of Sensitive Information to an Unauthorized Actor | 7.5 | |
| Medium | CVE-2021-22789 | Schneider Electric Modicon M340 Bmxp341000: Improper Restriction of Operations within the Bounds of a Memory Buffer | 6.5 | |
| Medium | CVE-2021-22791 | Schneider Electric Modicon M340 Bmxp341000: Out-of-bounds Write | 6.5 | |
| Medium | CVE-2021-22790 | Schneider Electric Modicon M340 Bmxp341000: Out-of-bounds Read | 6.5 | |
| Medium | CVE-2020-7541 | Schneider-Electric 140CPU65150 Firmware: Forced Browsing | 5.3 | |
| High | CVE-2021-22780 | Schneider Electric Ecostruxure Control Expert: Insufficiently Protected Credentials | 7.1 | |
| High | CVE-2021-22778 | Schneider Electric Ecostruxure Control Expert: Insufficiently Protected Credentials | 7.1 | |
| Medium | CVE-2021-22781 | Schneider Electric Ecostruxure Control Expert: Insufficiently Protected Credentials | 5.5 | |
| Medium | CVE-2021-22782 | Schneider Electric Ecostruxure Control Expert: Missing Encryption of Sensitive Data | 5.5 |