Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

schneider-electric modicon m340 bmxnor0200h firmware - vulnerabilities and exploits

(subscribe to this query)
NA

CVE-2022-0222

A CWE-269: Improper Privilege Management vulnerability exists that could cause a denial of service of the Ethernet communication of the controller when sending a specific request over SNMP. Affected products: Modicon M340 CPUs(BMXP34* versions prior to V3.40), Modicon M340 X80 Et...
Schneider-electric Modicon M340 Bmxp341000 FirmwareSchneider-electric Modicon M340 Bmxp342000 FirmwareSchneider-electric Modicon M340 Bmxp342010 FirmwareSchneider-electric Modicon M340 Bmxp3420102 FirmwareSchneider-electric Modicon M340 Bmxp342020 FirmwareSchneider-electric Modicon M340 Bmxp342020h FirmwareSchneider-electric Modicon M340 Bmxp342030 FirmwareSchneider-electric Modicon M340 Bmxp3420302 FirmwareSchneider-electric Modicon M340 Bmxp3420302h FirmwareSchneider-electric Modicon M340 Bmxp342030h FirmwareSchneider-electric Modicon M340 Bmxnoe0100 Firmware -Schneider-electric Modicon M340 Bmxnoe0110 Firmware -Schneider-electric Modicon M340 Bmxnoe0110h Firmware -Schneider-electric Modicon M340 Bmxnor0200h Firmware -
445
VMScore

CVE-2021-22785

A CWE-200: Information Exposure vulnerability exists that could cause sensitive information of files located in the web root directory to leak when an attacker sends a HTTP request to the web server of the device. Affected Product: Modicon M340 CPUs: BMXP34 (Versions prior to V3....
Schneider-electric Modicon M340 Bmxp342020 FirmwareSchneider-electric Bmxnoe0100 FirmwareSchneider-electric Bmxnoe0110 FirmwareSchneider-electric Bmxnoc0401 FirmwareSchneider-electric Bmxnor0200h Rtu FirmwareSchneider-electric Tsxp574634 FirmwareSchneider-electric Tsxp575634 FirmwareSchneider-electric Tsxp576634 FirmwareSchneider-electric 140cpu65150 FirmwareSchneider-electric 140noe771x1 FirmwareSchneider-electric 140noc78x00 FirmwareSchneider-electric 140noc77101 FirmwareSchneider-electric Tsxety4103 FirmwareSchneider-electric Tsxety5103 Firmware
445
VMScore

CVE-2021-22787

A CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of the device when an attacker sends a specially crafted HTTP request to the web server of the device. Affected Product: Modicon M340 CPUs: BMXP34 (Versions prior to V3.40), Modicon M340 X...
Schneider-electric Modicon M340 Bmxp342020 FirmwareSchneider-electric Bmxnoe0100 FirmwareSchneider-electric Bmxnoe0110 FirmwareSchneider-electric Bmxnoc0401 FirmwareSchneider-electric Bmxnor0200h Rtu FirmwareSchneider-electric Tsxp574634 FirmwareSchneider-electric Tsxp575634 FirmwareSchneider-electric Tsxp576634 FirmwareSchneider-electric 140cpu65150 FirmwareSchneider-electric 140noe771x1 FirmwareSchneider-electric 140noc78x00 FirmwareSchneider-electric 140noc77101 FirmwareSchneider-electric Tsxety4103 FirmwareSchneider-electric Tsxety5103 Firmware
445
VMScore

CVE-2021-22788

A CWE-787: Out-of-bounds Write vulnerability exists that could cause denial of service when an attacker sends a specially crafted HTTP request to the web server of the device. Affected Product: Modicon M340 CPUs: BMXP34 (Versions prior to V3.40), Modicon M340 X80 Ethernet Communi...
Schneider-electric Modicon M340 Bmxp342020 FirmwareSchneider-electric Bmxnoe0100 FirmwareSchneider-electric Bmxnoe0110 FirmwareSchneider-electric Bmxnoc0401 FirmwareSchneider-electric Bmxnor0200h Rtu FirmwareSchneider-electric Tsxp574634 FirmwareSchneider-electric Tsxp575634 FirmwareSchneider-electric Tsxp576634 FirmwareSchneider-electric 140cpu65150 FirmwareSchneider-electric 140noe771x1 FirmwareSchneider-electric 140noc78x00 FirmwareSchneider-electric 140noc77101 FirmwareSchneider-electric Tsxety4103 FirmwareSchneider-electric Tsxety5103 Firmware
605
VMScore

CVE-2020-7534

A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists on the web server used, that could cause a leak of sensitive data or unauthorized actions on the web server during the time the user is logged in. Affected Products: Modicon M340 CPUs: BMXP34 (All Versions), Modico...
Schneider-electric Modicon M340 Bmxp342020 FirmwareSchneider-electric 140cpu65 FirmwareSchneider-electric Tsxp57 FirmwareSchneider-electric Bmxnoc0401 FirmwareSchneider-electric Bmxnoe01 FirmwareSchneider-electric Bmxnor0200h FirmwareSchneider-electric 140noe77111 FirmwareSchneider-electric 140noc78000 FirmwareSchneider-electric Tsxety5103 FirmwareSchneider-electric Tsxety4103 Firmware
694
VMScore

CVE-2020-7536

A CWE-754:Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M340 CPUs (BMXP34* versions prior to V3.30) Modicon M340 Communication Ethernet modules (BMXNOE0100 (H) versions prior to V3.4 BMXNOE0110 (H) versions prior to V6.6 BMXNOR0200H all vers...
Schneider-electric Modicon M340 Bmxp341000 FirmwareSchneider-electric Modicon M340 Bmxp342000 FirmwareSchneider-electric Modicon M340 Bmxp3420102 FirmwareSchneider-electric Modicon M340 Bmxp3420102cl FirmwareSchneider-electric Modicon M340 Bmxp342020 FirmwareSchneider-electric Modicon M340 Bmxp3420302 FirmwareSchneider-electric Modicon M340 Bmxp3420302cl FirmwareSchneider-electric Bmxnoe0100 FirmwareSchneider-electric Bmxnoe0110 FirmwareSchneider-electric Bmxnor0200h Firmware
694
VMScore

CVE-2019-6813

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module (all firmware versions) and Modicon M340 controller (all firmware versions), which could cause denial of service when truncated SNMP packets on port 16...
Schneider-electric Modicon M340 FirmwareSchneider-electric Bmxnor0200h Firmware -
490
VMScore

CVE-2015-6461

Remote file inclusion allows an malicious user to craft a specific URL referencing the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, or BMXP342030H PLC web server, which, wh...
Schneider-electric Bmxnoc0401 Firmware -Schneider-electric Bmxnoe0100 Firmware -Schneider-electric Bmxnoe0110 Firmware -Schneider-electric Bmxnoe0110h Firmware -Schneider-electric Bmxnor0200h Firmware -Schneider-electric Modicon M340 Bmxp342020 Firmware -Schneider-electric Modicon M340 Bmxp342020h Firmware -Schneider-electric Modicon M340 Bmxp342030 Firmware -Schneider-electric Modicon M340 Bmxp3420302 Firmware -Schneider-electric Modicon M340 Bmxp3420302h Firmware -Schneider-electric Modicon M340 Bmxp342030h Firmware -
312
VMScore

CVE-2015-6462

Reflected Cross-Site Scripting (nonpersistent) allows an malicious user to craft a specific URL, which contains Java script that will be executed on the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, B...
Schneider-electric Bmxnoc0401 Firmware -Schneider-electric Bmxnoe0100 Firmware -Schneider-electric Bmxnoe0110 Firmware -Schneider-electric Bmxnoe0110h Firmware -Schneider-electric Bmxnor0200h Firmware -Schneider-electric Modicon M340 Bmxp342020 Firmware -Schneider-electric Modicon M340 Bmxp342020h Firmware -Schneider-electric Modicon M340 Bmxp342030 Firmware -Schneider-electric Modicon M340 Bmxp3420302 Firmware -Schneider-electric Modicon M340 Bmxp3420302h Firmware -Schneider-electric Modicon M340 Bmxp342030h Firmware -
445
VMScore

CVE-2018-7833

An Improper Check for Unusual or Exceptional Conditions vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where an unauthenticated user can send a specially crafted XML data via a POST request to cause the web server to bec...
Schneider-electric Modicom M340 FirmwareSchneider-electric Modicom Premium FirmwareSchneider-electric Modicom Quantum FirmwareSchneider-electric Modicom Bmxnor0200h Firmware
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
privilegeCVE-2022-48762CVE-2022-48751CVE-2024-37079CVE-2024-30848LFIman-in-the-middleCVE-2022-48736CVE-2024-30103
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook