GCVE - cpe:2.3:h:schneider-electric:bmxnoe0110h:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:schneider-electric:bmxnoe0110h:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Schneider Electric (`e6a779d5-aeb8-5b94-be36-761d5c05741c`)
Product	Bmxnoe0110H (`fcb077cc-fc06-5c53-b135-ce24070cf1fa`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-6017`	not_vulnerable	2026-06-08 05:09:50.343262	Details available A Resource Exhaustion issue was discovered in Schneider Electric Modicon M340 PLC BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP341000, BMXP342000, BMXP3420102, BMXP3420102CL, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, and BMXP342030H. A remote attacker could send a specially crafted set of packets to the PLC causing it to freeze, requiring the operator to physically press the reset button on the PLC in order to recover. Published: 2017-06-30T02:35:00.000Z Updated: 2024-08-05T15:18:49.611Z Open on db.gcve.eu Reference links https://www.schneider-electric.com/en/download/document/SEVD-2017-048-02/ http://www.securityfocus.com/bid/96414 https://ics-cert.us-cert.gov/advisories/ICSA-17-054-03	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-7937`	vulnerable	2026-06-08 05:07:02.365817	Details available Stack-based buffer overflow in the GoAhead Web Server on Schneider Electric Modicon M340 PLC BMXNOx and BMXPx devices allows remote attackers to execute arbitrary code via a long password in HTTP Basic Authentication data. Published: 2015-12-21T11:00:00.000Z Updated: 2024-08-06T08:06:30.903Z Open on db.gcve.eu Reference links https://ics-cert.us-cert.gov/advisories/ICSA-15-351-01 http://www.securityfocus.com/bid/79622 http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-344-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-6462`	not_vulnerable	2026-06-08 05:06:52.497830	Details available Reflected Cross-Site Scripting (nonpersistent) allows an attacker to craft a specific URL, which contains Java script that will be executed on the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, or BMXP342030H PLC client browser. Published: 2019-03-21T18:44:47.000Z Updated: 2024-08-06T07:22:21.488Z Open on db.gcve.eu Reference links https://ics-cert.us-cert.gov/advisories/ICSA-15-246-02	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-6461`	not_vulnerable	2026-06-08 05:06:52.487521	Details available Remote file inclusion allows an attacker to craft a specific URL referencing the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, or BMXP342030H PLC web server, which, when launched, will result in the browser redirecting to a remote file via a Java script loaded with the web page. Published: 2019-03-21T18:17:48.000Z Updated: 2024-08-06T07:22:21.501Z Open on db.gcve.eu Reference links https://ics-cert.us-cert.gov/advisories/ICSA-15-246-02	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.