Home/Product/schneider electric modicon m340 bmxp342030h firmware
Product

schneider electric modicon m340 bmxp342030h firmware

10 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2023-6408
< 3.60
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could
8.1HIGH
CVE-2021-22786
< 3.40
A CWE-200: Information Exposure vulnerability exists that could cause the exposure of sensitive information stored on the memory o
7.5HIGH
CVE-2022-45789
all versions
A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbus function
8.1HIGH
CVE-2022-45788
all versions
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code execution, de
7.5HIGH
CVE-2022-0222
< 3.50
A CWE-269: Improper Privilege Management vulnerability exists that could cause a denial of service of the Ethernet communication o
7.5HIGH
CVE-2022-37300
< 3.50
A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists that could cause unauthorized access in re
9.8CRITICAL
CVE-2015-6462
all versions
Reflected Cross-Site Scripting (nonpersistent) allows an attacker to craft a specific URL, which contains Java script that will be
5.4MEDIUM
CVE-2015-6461
all versions
Remote file inclusion allows an attacker to craft a specific URL referencing the Schneider Electric Modicon BMXNOC0401, BMXNOE0100
5.4MEDIUM
CVE-2017-6017
all versions
A Resource Exhaustion issue was discovered in Schneider Electric Modicon M340 PLC BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H,
7.5HIGH
CVE-2014-0754
all versions
Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 14
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh  ·  Open-source threat intelligence platform  ·  100+ authoritative sources  ·  Every fact traces to its origin