Modicon M340 Bmx P34 2030 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:schneider-electric:modicon_m340_bmx_p34-2030_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Schneider Electric (e6a779d5-aeb8-5b94-be36-761d5c05741c) |
|---|---|
| Product | Modicon M340 Bmx P34 2030 Firmware (239f2bfc-ef1c-5c38-8ec6-d61927f1fc98) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-37301 |
vulnerable | 2026-06-08 05:47:11.922157 |
Details available
HIGH (7.5)
A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus TCP protocol. Affected products: Modicon M340 CPU (part numbers BMXP34*)(V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*)(V3.22 and prior), Legacy Modicon Quantum/Premium(All Versions), Modicon Momentum MDI (171CBU*)(All Versions), Modicon MC80 (BMKC80)(V1.7 and prior)
Published: 2022-11-22T00:00:00.000Z
Updated: 2025-04-28T14:32:19.547Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7564 |
vulnerable | 2026-06-08 05:27:13.584410 |
Details available
A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause write access and the execution of commands when uploading a specially crafted file on the controller over FTP.
Published: 2020-11-18T13:51:16.000Z
Updated: 2026-05-29T13:25:41.819Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7563 |
vulnerable | 2026-06-08 05:27:13.581634 |
Details available
A CWE-787: Out-of-bounds Write vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause corruption of data, a crash, or code execution when uploading a specially crafted file on the controller over FTP.
Published: 2020-11-18T13:50:57.000Z
Updated: 2026-05-29T13:24:10.642Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7562 |
vulnerable | 2026-06-08 05:27:13.567902 |
Details available
A CWE-125: Out-of-Bounds Read vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause a segmentation fault or a buffer overflow when uploading a specially crafted file on the controller over FTP.
Published: 2020-11-18T13:54:32.000Z
Updated: 2026-05-29T13:21:41.514Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.