Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

schneider-electric bmxnoe0100 - vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2015-7937
Stack-based buffer overflow in the GoAhead Web Server on Schneider Electric Modicon M340 PLC BMXNOx and BMXPx devices allows remote malicious users to execute arbitrary code via a long password in HTTP Basic Authentication data.
Schneider-electric Bmxnoe0110h -Schneider-electric Bmxpra0100 -Schneider-electric Bmxnoc0401 -Schneider-electric Bmxnor0200h -Schneider-electric Bmxnoe0100 -Schneider-electric Bmxnor0200 -Schneider-electric Bmxnoe0110 -Schneider-electric Bmxnoe0100h -Schneider-electric Modicon M340 Bmxp342020 -Schneider-electric Modicon M340 Bmxp342030 -Schneider-electric Modicon M340 Bmxp3420302 -Schneider-electric Modicon M340 Bmxp342020h -Schneider-electric Modicon M340 Bmxp3420302h -
NA
CVE-2011-4859
The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771* and 140CPU65* modules, the Premium TSXETY* and TSXP57* modules, the M340 BMXNOE01* and BMXP3420* modules, and the STB DIO STBNIC2212 and STBNIP2* modules, uses hardcoded passwords for the (1) AUTCSE...
Schneider-electric Quantum Ethernet Module 140cpu65150Schneider-electric Quantum Ethernet Module 140cpu65160Schneider-electric Quantum Ethernet Module 140cpu65260Schneider-electric Quantum Ethernet Module 140noe77101Schneider-electric Quantum Ethernet Module 140noe77111Schneider-electric Quantum Ethernet Module 140noe77100Schneider-electric Premium Ethernet Module Tsxp573634mSchneider-electric Premium Ethernet Module Tsxp574634mSchneider-electric Premium Ethernet Module Tsxp575634mSchneider-electric Premium Ethernet Module Tsxp576634mSchneider-electric Premium Ethernet Module Tsxety4103Schneider-electric Premium Ethernet Module Tsxety5103Schneider-electric Premium Ethernet Module Tsxp57163mSchneider-electric Premium Ethernet Module Tsxp572634mSchneider-electric M340 Ethernet Module Bmxnoe0110Schneider-electric M340 Ethernet Module Bmxnoe0100Schneider-electric M340 Ethernet Module Bmxp342030Schneider-electric M340 Ethernet Module Bmxp342020Schneider-electric Stb Dio Ethernet Module Stbnic2212Schneider-electric Stb Dio Ethernet Module Stbnip2311Schneider-electric Stb Dio Ethernet Module Stbnip2212
NA
CVE-2014-0754
Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec prior to 5.5, 140NOC78x Exec prior to 1.62, 140NOE77x Exec prior to 6.2, BMXNOC0401 prior to 2.05, BMXNOE0100 prior to 2.9, BMXNOE0110x Exec prior to 6.0, TSXETC101...
Schneider-electric Stbnic2212 Firmware -Schneider-electric Stbnip2212 Firmware -Schneider-electric Tsxetc0101 Firmware -Schneider-electric Tsxetc100 Firmware -Schneider-electric Tsxp573623mc Firmware -Schneider-electric Tsxety110ws Firmware -Schneider-electric Tsxp574634m Firmware -Schneider-electric Tsxety110wsc Firmware -Schneider-electric Tsxp574823am Firmware -Schneider-electric Tsxety4103 Firmware -Schneider-electric Tsxp574823m Firmware -Schneider-electric Tsxety4103c Firmware -Schneider-electric Tsxp574823mc Firmware -Schneider-electric Tsxety5103 Firmware -Schneider-electric Tsxp575634m Firmware -Schneider-electric Tsxety5103c Firmware -Schneider-electric Tsxp576634m Firmware -Schneider-electric Tsxetz410 Firmware -Schneider-electric Tsxwmy100 Firmware -Schneider-electric Tsxetz510 Firmware -Schneider-electric Tsxwmy100c Firmware -Schneider-electric Tsxntp100 Firmware -
5.4
CVSSv3
CVE-2015-6462
Reflected Cross-Site Scripting (nonpersistent) allows an malicious user to craft a specific URL, which contains Java script that will be executed on the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, B...
Schneider-electric Bmxnoc0401 Firmware -Schneider-electric Bmxnoe0100 Firmware -Schneider-electric Bmxnoe0110 Firmware -Schneider-electric Bmxnoe0110h Firmware -Schneider-electric Bmxnor0200h Firmware -Schneider-electric Modicon M340 Bmxp342020 Firmware -Schneider-electric Modicon M340 Bmxp342020h Firmware -Schneider-electric Modicon M340 Bmxp342030 Firmware -Schneider-electric Modicon M340 Bmxp3420302 Firmware -Schneider-electric Modicon M340 Bmxp3420302h Firmware -Schneider-electric Modicon M340 Bmxp342030h Firmware -
5.4
CVSSv3
CVE-2015-6461
Remote file inclusion allows an malicious user to craft a specific URL referencing the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, or BMXP342030H PLC web server, which, wh...
Schneider-electric Bmxnoc0401 Firmware -Schneider-electric Bmxnoe0100 Firmware -Schneider-electric Bmxnoe0110 Firmware -Schneider-electric Bmxnoe0110h Firmware -Schneider-electric Bmxnor0200h Firmware -Schneider-electric Modicon M340 Bmxp342020 Firmware -Schneider-electric Modicon M340 Bmxp342020h Firmware -Schneider-electric Modicon M340 Bmxp342030 Firmware -Schneider-electric Modicon M340 Bmxp3420302 Firmware -Schneider-electric Modicon M340 Bmxp3420302h Firmware -Schneider-electric Modicon M340 Bmxp342030h Firmware -
7.5
CVSSv3
CVE-2020-7536
A CWE-754:Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M340 CPUs (BMXP34* versions prior to V3.30) Modicon M340 Communication Ethernet modules (BMXNOE0100 (H) versions prior to V3.4 BMXNOE0110 (H) versions prior to V6.6 BMXNOR0200H all vers...
Schneider-electric Modicon M340 Bmxp341000 FirmwareSchneider-electric Modicon M340 Bmxp342000 FirmwareSchneider-electric Modicon M340 Bmxp3420102 FirmwareSchneider-electric Modicon M340 Bmxp3420102cl FirmwareSchneider-electric Modicon M340 Bmxp342020 FirmwareSchneider-electric Modicon M340 Bmxp3420302 FirmwareSchneider-electric Modicon M340 Bmxp3420302cl FirmwareSchneider-electric Bmxnoe0100 FirmwareSchneider-electric Bmxnoe0110 FirmwareSchneider-electric Bmxnor0200h Firmware
7.5
CVSSv3
CVE-2021-22788
A CWE-787: Out-of-bounds Write vulnerability exists that could cause denial of service when an attacker sends a specially crafted HTTP request to the web server of the device. Affected Product: Modicon M340 CPUs: BMXP34 (Versions prior to V3.40), Modicon M340 X80 Ethernet Communi...
Schneider-electric Modicon M340 Bmxp342020 FirmwareSchneider-electric Bmxnoe0100 FirmwareSchneider-electric Bmxnoe0110 FirmwareSchneider-electric Bmxnoc0401 FirmwareSchneider-electric Bmxnor0200h Rtu FirmwareSchneider-electric Tsxp574634 FirmwareSchneider-electric Tsxp575634 FirmwareSchneider-electric Tsxp576634 FirmwareSchneider-electric 140cpu65150 FirmwareSchneider-electric 140noe771x1 FirmwareSchneider-electric 140noc78x00 FirmwareSchneider-electric 140noc77101 FirmwareSchneider-electric Tsxety4103 FirmwareSchneider-electric Tsxety5103 Firmware
7.5
CVSSv3
CVE-2021-22785
A CWE-200: Information Exposure vulnerability exists that could cause sensitive information of files located in the web root directory to leak when an attacker sends a HTTP request to the web server of the device. Affected Product: Modicon M340 CPUs: BMXP34 (Versions prior to V3....
Schneider-electric Modicon M340 Bmxp342020 FirmwareSchneider-electric Bmxnoe0100 FirmwareSchneider-electric Bmxnoe0110 FirmwareSchneider-electric Bmxnoc0401 FirmwareSchneider-electric Bmxnor0200h Rtu FirmwareSchneider-electric Tsxp574634 FirmwareSchneider-electric Tsxp575634 FirmwareSchneider-electric Tsxp576634 FirmwareSchneider-electric 140cpu65150 FirmwareSchneider-electric 140noe771x1 FirmwareSchneider-electric 140noc78x00 FirmwareSchneider-electric 140noc77101 FirmwareSchneider-electric Tsxety4103 FirmwareSchneider-electric Tsxety5103 Firmware
7.5
CVSSv3
CVE-2021-22787
A CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of the device when an attacker sends a specially crafted HTTP request to the web server of the device. Affected Product: Modicon M340 CPUs: BMXP34 (Versions prior to V3.40), Modicon M340 X...
Schneider-electric Modicon M340 Bmxp342020 FirmwareSchneider-electric Bmxnoe0100 FirmwareSchneider-electric Bmxnoe0110 FirmwareSchneider-electric Bmxnoc0401 FirmwareSchneider-electric Bmxnor0200h Rtu FirmwareSchneider-electric Tsxp574634 FirmwareSchneider-electric Tsxp575634 FirmwareSchneider-electric Tsxp576634 FirmwareSchneider-electric 140cpu65150 FirmwareSchneider-electric 140noe771x1 FirmwareSchneider-electric 140noc78x00 FirmwareSchneider-electric 140noc77101 FirmwareSchneider-electric Tsxety4103 FirmwareSchneider-electric Tsxety5103 Firmware
7.5
CVSSv3
CVE-2017-6017
A Resource Exhaustion issue exists in Schneider Electric Modicon M340 PLC BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP341000, BMXP342000, BMXP3420102, BMXP3420102CL, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, and BMXP342030H. A remote at...
Schneider-electric Bmxnoc0401 Firmware 2.8Schneider-electric Bmxnoe0100 Firmware 2.8Schneider-electric Bmxnoe0110 Firmware 2.8Schneider-electric Bmxnoe0110h Firmware 2.8Schneider-electric Bmxnor0200h Firmware 2.8Schneider-electric Modicon M340 Bmxp341000 Firmware 2.8Schneider-electric Modicon M340 Bmxp342000 Firmware 2.8Schneider-electric Modicon M340 Bmxp3420102 Firmware 2.8Schneider-electric Modicon M340 Bmxp3420102cl Firmware 2.8Schneider-electric Modicon M340 Bmxp342020 Firmware 2.8Schneider-electric Modicon M340 Bmxp342020h Firmware 2.8Schneider-electric Modicon M340 Bmxp342030 Firmware 2.8Schneider-electric Modicon M340 Bmxp3420302 Firmware 2.8Schneider-electric Modicon M340 Bmxp3420302h Firmware 2.8Schneider-electric Modicon M340 Bmxp342030h Firmware 2.8
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
authentication bypassCVE-2024-30051remoteCVE-2024-27954CVE-2023-51483CVE-2023-47782SSRFCVE-2024-24715CVE-2023-52424
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook