Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

schneider-electric modicon m340 bmxnoc0401 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2015-7937
Stack-based buffer overflow in the GoAhead Web Server on Schneider Electric Modicon M340 PLC BMXNOx and BMXPx devices allows remote malicious users to execute arbitrary code via a long password in HTTP Basic Authentication data.
Schneider-electric Bmxnoe0110h -Schneider-electric Bmxpra0100 -Schneider-electric Bmxnoc0401 -Schneider-electric Bmxnor0200h -Schneider-electric Bmxnoe0100 -Schneider-electric Bmxnor0200 -Schneider-electric Bmxnoe0110 -Schneider-electric Bmxnoe0100h -Schneider-electric Modicon M340 Bmxp342020 -Schneider-electric Modicon M340 Bmxp342030 -Schneider-electric Modicon M340 Bmxp3420302 -Schneider-electric Modicon M340 Bmxp342020h -Schneider-electric Modicon M340 Bmxp3420302h -
NA
CVE-2013-0663
Cross-site request forgery (CSRF) vulnerability on the Schneider Electric Quantum 140NOE77111, 140NOE77101, and 140NWM10000; M340 BMXNOC0401, BMXNOE0100x, and BMXNOE011xx; and Premium TSXETY4103, TSXETY5103, and TSXWMY100 PLC modules allows remote malicious users to hijack the au...
Schneider-electric Modicon Quantum Plc 140noe77101Schneider-electric Modicon Quantum Plc 140nwm10000Schneider-electric Modicon Quantum Plc 140noe77111Schneider-electric Modicon M340 Bmxnoe0100xSchneider-electric Modicon M340 Bmxnoe011xxSchneider-electric Modicon M340 Bmxnoc0401Schneider-electric Modicon Premium Tsxety5103Schneider-electric Modicon Premium Tsxwmy100Schneider-electric Modicon Premium Tsxety4103
7.5
CVSSv3
CVE-2021-22788
A CWE-787: Out-of-bounds Write vulnerability exists that could cause denial of service when an attacker sends a specially crafted HTTP request to the web server of the device. Affected Product: Modicon M340 CPUs: BMXP34 (Versions prior to V3.40), Modicon M340 X80 Ethernet Communi...
Schneider-electric Modicon M340 Bmxp342020 FirmwareSchneider-electric Bmxnoe0100 FirmwareSchneider-electric Bmxnoe0110 FirmwareSchneider-electric Bmxnoc0401 FirmwareSchneider-electric Bmxnor0200h Rtu FirmwareSchneider-electric Tsxp574634 FirmwareSchneider-electric Tsxp575634 FirmwareSchneider-electric Tsxp576634 FirmwareSchneider-electric 140cpu65150 FirmwareSchneider-electric 140noe771x1 FirmwareSchneider-electric 140noc78x00 FirmwareSchneider-electric 140noc77101 FirmwareSchneider-electric Tsxety4103 FirmwareSchneider-electric Tsxety5103 Firmware
7.5
CVSSv3
CVE-2021-22787
A CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of the device when an attacker sends a specially crafted HTTP request to the web server of the device. Affected Product: Modicon M340 CPUs: BMXP34 (Versions prior to V3.40), Modicon M340 X...
Schneider-electric Modicon M340 Bmxp342020 FirmwareSchneider-electric Bmxnoe0100 FirmwareSchneider-electric Bmxnoe0110 FirmwareSchneider-electric Bmxnoc0401 FirmwareSchneider-electric Bmxnor0200h Rtu FirmwareSchneider-electric Tsxp574634 FirmwareSchneider-electric Tsxp575634 FirmwareSchneider-electric Tsxp576634 FirmwareSchneider-electric 140cpu65150 FirmwareSchneider-electric 140noe771x1 FirmwareSchneider-electric 140noc78x00 FirmwareSchneider-electric 140noc77101 FirmwareSchneider-electric Tsxety4103 FirmwareSchneider-electric Tsxety5103 Firmware
7.5
CVSSv3
CVE-2021-22785
A CWE-200: Information Exposure vulnerability exists that could cause sensitive information of files located in the web root directory to leak when an attacker sends a HTTP request to the web server of the device. Affected Product: Modicon M340 CPUs: BMXP34 (Versions prior to V3....
Schneider-electric Modicon M340 Bmxp342020 FirmwareSchneider-electric Bmxnoe0100 FirmwareSchneider-electric Bmxnoe0110 FirmwareSchneider-electric Bmxnoc0401 FirmwareSchneider-electric Bmxnor0200h Rtu FirmwareSchneider-electric Tsxp574634 FirmwareSchneider-electric Tsxp575634 FirmwareSchneider-electric Tsxp576634 FirmwareSchneider-electric 140cpu65150 FirmwareSchneider-electric 140noe771x1 FirmwareSchneider-electric 140noc78x00 FirmwareSchneider-electric 140noc77101 FirmwareSchneider-electric Tsxety4103 FirmwareSchneider-electric Tsxety5103 Firmware
8.8
CVSSv3
CVE-2020-7534
A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists on the web server used, that could cause a leak of sensitive data or unauthorized actions on the web server during the time the user is logged in. Affected Products: Modicon M340 CPUs: BMXP34 (All Versions), Modico...
Schneider-electric Modicon M340 Bmxp342020 FirmwareSchneider-electric 140cpu65 FirmwareSchneider-electric Tsxp57 FirmwareSchneider-electric Bmxnoc0401 FirmwareSchneider-electric Bmxnoe01 FirmwareSchneider-electric Bmxnor0200h FirmwareSchneider-electric 140noe77111 FirmwareSchneider-electric 140noc78000 FirmwareSchneider-electric Tsxety5103 FirmwareSchneider-electric Tsxety4103 Firmware
7.5
CVSSv3
CVE-2017-6017
A Resource Exhaustion issue exists in Schneider Electric Modicon M340 PLC BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP341000, BMXP342000, BMXP3420102, BMXP3420102CL, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, and BMXP342030H. A remote at...
Schneider-electric Bmxnoc0401 Firmware 2.8Schneider-electric Bmxnoe0100 Firmware 2.8Schneider-electric Bmxnoe0110 Firmware 2.8Schneider-electric Bmxnoe0110h Firmware 2.8Schneider-electric Bmxnor0200h Firmware 2.8Schneider-electric Modicon M340 Bmxp341000 Firmware 2.8Schneider-electric Modicon M340 Bmxp342000 Firmware 2.8Schneider-electric Modicon M340 Bmxp3420102 Firmware 2.8Schneider-electric Modicon M340 Bmxp3420102cl Firmware 2.8Schneider-electric Modicon M340 Bmxp342020 Firmware 2.8Schneider-electric Modicon M340 Bmxp342020h Firmware 2.8Schneider-electric Modicon M340 Bmxp342030 Firmware 2.8Schneider-electric Modicon M340 Bmxp3420302 Firmware 2.8Schneider-electric Modicon M340 Bmxp3420302h Firmware 2.8Schneider-electric Modicon M340 Bmxp342030h Firmware 2.8
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
client sideCVE-2023-31889template injectionCVE-2024-4304CVE-2006-4304CVE-2024-33272type confusionCVE-2024-21345CVE-2024-33271
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook