Approved changes feed: RSS · Atom

cpe:2.3:o:schneider-electric:modicon_m340_bmx_noe_0100h_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorSchneider Electric (e6a779d5-aeb8-5b94-be36-761d5c05741c)
ProductModicon M340 Bmx Noe 0100H Firmware (ae47ac9f-4ab0-5811-971f-bdbc3479af1c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-7564 vulnerable 2026-06-08 05:27:13.584543 Details available
A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause write access and the execution of commands when uploading a specially crafted file on the controller over FTP.
Published: 2020-11-18T13:51:16.000Z
Updated: 2026-05-29T13:25:41.819Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7563 vulnerable 2026-06-08 05:27:13.581913 Details available
A CWE-787: Out-of-bounds Write vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause corruption of data, a crash, or code execution when uploading a specially crafted file on the controller over FTP.
Published: 2020-11-18T13:50:57.000Z
Updated: 2026-05-29T13:24:10.642Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7562 vulnerable 2026-06-08 05:27:13.572188 Details available
A CWE-125: Out-of-Bounds Read vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause a segmentation fault or a buffer overflow when uploading a specially crafted file on the controller over FTP.
Published: 2020-11-18T13:54:32.000Z
Updated: 2026-05-29T13:21:41.514Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.