Approved changes feed: RSS · Atom

cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420102cl_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorSchneider Electric (e6a779d5-aeb8-5b94-be36-761d5c05741c)
ProductModicon M340 Bmxp3420102Cl Firmware (4d2e4fdc-374c-588f-bca2-4834966d41c4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-6408 vulnerable 2026-06-08 06:19:47.278995 Details available
HIGH (8.1)
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause a denial of service and loss of confidentiality, integrity of controllers when conducting a Man in the Middle attack.
Published: 2024-02-14T16:52:24.805Z
Updated: 2024-08-02T08:28:21.776Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7549 vulnerable 2026-06-08 05:27:13.532040 Details available
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause denial of HTTP and FTP services when a series of specially crafted requests is sent to the controller over HTTP.
Published: 2020-12-11T00:52:26.000Z
Updated: 2026-05-28T21:05:18.170Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7543 vulnerable 2026-06-08 05:27:13.495658 Details available
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions), that could cause denial of service when a specially crafted Read Physical Memory request over Modbus is sent to the controller.
Published: 2020-12-11T00:52:21.000Z
Updated: 2024-08-04T09:33:19.525Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7542 vulnerable 2026-06-08 05:27:13.492570 Details available
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions), that could cause denial of service when a specially crafted Read Physical Memory request over Modbus is sent to the controller.
Published: 2020-12-11T00:52:14.000Z
Updated: 2024-08-04T09:33:19.616Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7541 vulnerable 2026-06-08 05:27:13.488436 Details available
A CWE-425: Direct Request ('Forced Browsing') vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause disclosure of sensitive data when sending a specially crafted request to the controller over HTTP.
Published: 2020-12-11T00:52:09.000Z
Updated: 2024-08-04T09:33:19.936Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7540 vulnerable 2026-06-08 05:27:13.469049 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7539 vulnerable 2026-06-08 05:27:13.466101 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7537 vulnerable 2026-06-08 05:27:13.460932 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7536 vulnerable 2026-06-08 05:27:13.441742 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7535 vulnerable 2026-06-08 05:27:13.430472 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.