Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

schneider-electric 140noe77101 firmware vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3

CVE-2019-6811

An Improper Check for Unusual or Exceptional Conditions (CWE-754) vulnerability exists in Modicon Quantum 140 NOE771x1 version 6.9 and previous versions, which could cause denial of service when the module receives an IP fragmented packet with a length greater than 65535 bytes. T...
Schneider-electric Modicon Quantum 140noe77101 FirmwareSchneider-electric Modicon Quantum 140noe77111 Firmware
NA

CVE-2011-4861

The modbus_125_handler function in the Schneider Electric Quantum Ethernet Module on the NOE 771 device (aka the Quantum 140NOE771* module) allows remote malicious users to install arbitrary firmware updates via a MODBUS 125 function code to TCP port 502.
Schneider-electric Quantum Ethernet Module 140noe77101Schneider-electric Quantum Ethernet Module 140noe77100Schneider-electric Quantum Ethernet Module 140noe77111
7.5
CVSSv3

CVE-2020-7535

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal' Vulnerability Type) vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notif...
Schneider-electric Modicon M340 Bmxp341000 FirmwareSchneider-electric Modicon M340 Bmxp342000 FirmwareSchneider-electric Modicon M340 Bmxp3420102 FirmwareSchneider-electric Modicon M340 Bmxp3420102cl FirmwareSchneider-electric Modicon M340 Bmxp342020 FirmwareSchneider-electric Modicon M340 Bmxp3420302 FirmwareSchneider-electric Modicon M340 Bmxp3420302cl FirmwareSchneider-electric Bmxnoe0100 FirmwareSchneider-electric Bmxnoe0110 FirmwareSchneider-electric 140noe77101 FirmwareSchneider-electric 140noe77111 FirmwareSchneider-electric 140cpu65150 FirmwareSchneider-electric 140cpu65160 FirmwareSchneider-electric 140noc78000 FirmwareSchneider-electric 140noc78100 FirmwareSchneider-electric 140noc77101 FirmwareSchneider-electric Tsxp574634 FirmwareSchneider-electric Tsxp575634 FirmwareSchneider-electric Tsxp576634 FirmwareSchneider-electric Tsxety4103 FirmwareSchneider-electric Tsxety5103 Firmware
7.5
CVSSv3

CVE-2020-7477

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Quantum Ethernet Network module 140NOE771x1 (Versions 7.0 and prior), Quantum processors with integrated Ethernet – 140CPU65xxxxx (all Versions), and Premium processors with integrated E...
Schneider-electric 140noe77101 FirmwareSchneider-electric 140noe77111 FirmwareSchneider-electric Tsxh5744m FirmwareSchneider-electric Tsxh5724m FirmwareSchneider-electric Tsxp576634m FirmwareSchneider-electric Tsxp57554m FirmwareSchneider-electric Tsxp575634m FirmwareSchneider-electric Tsxp57454m FirmwareSchneider-electric Tsxp574634m FirmwareSchneider-electric Tsxp573634m FirmwareSchneider-electric Tsxp57304m FirmwareSchneider-electric Tsxp57254m FirmwareSchneider-electric Tsxp572634m FirmwareSchneider-electric Tsxp57204m FirmwareSchneider-electric Tsxp571634m FirmwareSchneider-electric Tsxp57154m FirmwareSchneider-electric Tsxp57104m FirmwareSchneider-electric 140cpu65150 FirmwareSchneider-electric 140cpu65160 FirmwareSchneider-electric 140cpu65260 FirmwareSchneider-electric 140cpu67261 FirmwareSchneider-electric 140cpu67060 Firmware
9.8
CVSSv3

CVE-2020-7540

A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause unauthenticat...
Schneider-electric Modicon M340 Bmxp341000 FirmwareSchneider-electric Modicon M340 Bmxp342000 FirmwareSchneider-electric Modicon M340 Bmxp3420102 FirmwareSchneider-electric Modicon M340 Bmxp3420102cl FirmwareSchneider-electric Modicon M340 Bmxp342020 FirmwareSchneider-electric Modicon M340 Bmxp3420302 FirmwareSchneider-electric Modicon M340 Bmxp3420302cl FirmwareSchneider-electric Bmxnoe0100 FirmwareSchneider-electric Bmxnoe0110 FirmwareSchneider-electric 140noe77101 FirmwareSchneider-electric 140noe77111 FirmwareSchneider-electric 140cpu65150 FirmwareSchneider-electric 140cpu65160 FirmwareSchneider-electric 140noc78000 FirmwareSchneider-electric 140noc78100 FirmwareSchneider-electric 140noc77101 FirmwareSchneider-electric Tsxp574634 FirmwareSchneider-electric Tsxp575634 FirmwareSchneider-electric Tsxp576634 FirmwareSchneider-electric Tsxety4103 FirmwareSchneider-electric Tsxety5103 FirmwareSchneider-electric Bmxnoc0401 Firmware
8.8
CVSSv3

CVE-2020-7564

A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause w...
Schneider-electric Modicon Tsxety4103 FirmwareSchneider-electric Modicon Tsxety5103 FirmwareSchneider-electric Modicon Tsxp574634 FirmwareSchneider-electric Modicon Tsxp575634 FirmwareSchneider-electric Modicon Tsxp576634 FirmwareSchneider-electric Modicon Quantum 140noe77101 FirmwareSchneider-electric Modicon Quantum 140noe77111 FirmwareSchneider-electric Modicon Quantum 140noc78100 FirmwareSchneider-electric Modicon Quantum 140cpu65150 FirmwareSchneider-electric Modicon Quantum 140cpu65150c FirmwareSchneider-electric Modicon Quantum 140cpu65160c FirmwareSchneider-electric Modicon Quantum 140cpu65160 FirmwareSchneider-electric Modicon M340 Bmx P34-2010 FirmwareSchneider-electric Modicon M340 Bmx P34-2030 FirmwareSchneider-electric Modicon M340 Bmx Noc 0401 FirmwareSchneider-electric Modicon M340 Bmx Noe 0100 FirmwareSchneider-electric Modicon M340 Bmx Noe 0100h FirmwareSchneider-electric Modicon M340 Bmx Noe 0110 FirmwareSchneider-electric Modicon M340 Bmx Noe 0110h FirmwareSchneider-electric Modicon M340 Bmx Nor 0200h Firmware
8.1
CVSSv3

CVE-2020-7562

A CWE-125: Out-of-Bounds Read vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause a segmentation fault or a buffer overflow when uploading a spec...
Schneider-electric Modicon Tsxety4103 FirmwareSchneider-electric Modicon Tsxety5103 FirmwareSchneider-electric Modicon Tsxp574634 FirmwareSchneider-electric Modicon Tsxp575634 FirmwareSchneider-electric Modicon Tsxp576634 FirmwareSchneider-electric Modicon Quantum 140noe77101 FirmwareSchneider-electric Modicon Quantum 140noe77111 FirmwareSchneider-electric Modicon Quantum 140noc78100 FirmwareSchneider-electric Modicon Quantum 140cpu65150 FirmwareSchneider-electric Modicon Quantum 140cpu65150c FirmwareSchneider-electric Modicon Quantum 140cpu65160c FirmwareSchneider-electric Modicon Quantum 140cpu65160 FirmwareSchneider-electric Modicon M340 Bmx P34-2010 FirmwareSchneider-electric Modicon M340 Bmx P34-2030 FirmwareSchneider-electric Modicon M340 Bmx Noc 0401 FirmwareSchneider-electric Modicon M340 Bmx Noe 0100 FirmwareSchneider-electric Modicon M340 Bmx Noe 0100h FirmwareSchneider-electric Modicon M340 Bmx Noe 0110 FirmwareSchneider-electric Modicon M340 Bmx Noe 0110h FirmwareSchneider-electric Modicon M340 Bmx Nor 0200h Firmware
8.8
CVSSv3

CVE-2020-7563

A CWE-787: Out-of-bounds Write vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause corruption of data, a crash, or code execution when uploading ...
Schneider-electric Modicon Tsxety4103 FirmwareSchneider-electric Modicon Tsxety5103 FirmwareSchneider-electric Modicon Tsxp574634 FirmwareSchneider-electric Modicon Tsxp575634 FirmwareSchneider-electric Modicon Tsxp576634 FirmwareSchneider-electric Modicon Quantum 140noe77101 FirmwareSchneider-electric Modicon Quantum 140noe77111 FirmwareSchneider-electric Modicon Quantum 140noc78100 FirmwareSchneider-electric Modicon Quantum 140cpu65150 FirmwareSchneider-electric Modicon Quantum 140cpu65150c FirmwareSchneider-electric Modicon Quantum 140cpu65160c FirmwareSchneider-electric Modicon Quantum 140cpu65160 FirmwareSchneider-electric Modicon M340 Bmx P34-2010 FirmwareSchneider-electric Modicon M340 Bmx P34-2030 FirmwareSchneider-electric Modicon M340 Bmx Noc 0401 FirmwareSchneider-electric Modicon M340 Bmx Noe 0100 FirmwareSchneider-electric Modicon M340 Bmx Noe 0100h FirmwareSchneider-electric Modicon M340 Bmx Noe 0110 FirmwareSchneider-electric Modicon M340 Bmx Noe 0110h FirmwareSchneider-electric Modicon M340 Bmx Nor 0200h Firmware
7.5
CVSSv3

CVE-2022-37301

A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus TCP protocol. Affected products: Modicon M340 CPU (part numbers BMXP34*)(V3.40 and prior), Modicon M...
Schneider-electric Modicon M340 Bmx P34-2010 FirmwareSchneider-electric Modicon M340 Bmx P34-2030 FirmwareSchneider-electric Modicon M580 Bmeh582040 FirmwareSchneider-electric Modicon M580 Bmeh582040c FirmwareSchneider-electric Modicon M580 Bmeh582040s FirmwareSchneider-electric Modicon M580 Bmeh584040 FirmwareSchneider-electric Modicon M580 Bmeh584040c FirmwareSchneider-electric Modicon M580 Bmeh584040s FirmwareSchneider-electric Modicon M580 Bmeh586040 FirmwareSchneider-electric Modicon M580 Bmeh586040c FirmwareSchneider-electric Modicon M580 Bmeh586040s FirmwareSchneider-electric Modicon M580 Bmep581020 FirmwareSchneider-electric Modicon M580 Bmep581020h FirmwareSchneider-electric Modicon M580 Bmep582020 FirmwareSchneider-electric Modicon M580 Bmep582020h FirmwareSchneider-electric Modicon M580 Bmep582040 FirmwareSchneider-electric Modicon M580 Bmep582040h FirmwareSchneider-electric Modicon M580 Bmep582040s FirmwareSchneider-electric Modicon M580 Bmep583020 FirmwareSchneider-electric Modicon M580 Bmep583040 FirmwareSchneider-electric Modicon M580 Bmep584020 FirmwareSchneider-electric Modicon M580 Bmep584040 Firmware
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-37316firmwareCVE-2024-30078CVE-2024-5995remote code executionlogic flawCVE-2024-20693CVE-2024-37315CVE-2024-5464
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook