Approved changes feed: RSS · Atom

cpe:2.3:a:schneider_electric:modicon_mc80_(bmkc80):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSchneider Electric (90ae6a25-22b7-5d12-ba01-612e2f9226a5)
ProductModicon Mc80 (Bmkc80) (9ccef1ce-ee32-599e-9fc4-b3f4f91d020c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-25620 vulnerable 2026-06-08 05:56:09.544105 Details available
MEDIUM (6.5)
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when a malicious project file is loaded onto the controller by an authenticated user.
Published: 2023-04-19T08:17:57.240Z
Updated: 2025-02-05T14:58:06.851Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25619 vulnerable 2026-06-08 05:56:09.532507 Details available
HIGH (7.5)
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when communicating over the Modbus TCP protocol.
Published: 2023-04-19T07:53:15.405Z
Updated: 2025-02-05T15:08:51.526Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45788 vulnerable 2026-06-08 05:50:36.690286 Details available
HIGH (7.5)
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when a malicious project file is loaded onto the controller. Affected Products: EcoStruxure Control Expert (All Versions), EcoStruxure Process Expert (All Versions), Modicon M340 CPU - part numbers BMXP34* (All Versions), Modicon M580 CPU - part numbers BMEP* and BMEH* (All Versions), Modicon M580 CPU Safety - part numbers BMEP58*S and BMEH58*S (All Versions), Modicon Momentum Unity M1E Processor - 171CBU* (All Versions), Modicon MC80 - BMKC80 (All Versions), Legacy Modicon Quantum - 140CPU65* and Premium CPUs - TSXP57* (All Versions)
Published: 2023-01-30T00:00:00.000Z
Updated: 2026-05-29T14:08:52.615Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37301 vulnerable 2026-06-08 05:47:11.919223 Details available
HIGH (7.5)
A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus TCP protocol. Affected products: Modicon M340 CPU (part numbers BMXP34*)(V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*)(V3.22 and prior), Legacy Modicon Quantum/Premium(All Versions), Modicon Momentum MDI (171CBU*)(All Versions), Modicon MC80 (BMKC80)(V1.7 and prior)
Published: 2022-11-22T00:00:00.000Z
Updated: 2025-04-28T14:32:19.547Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22786 vulnerable 2026-06-08 05:30:01.379662 Details available
HIGH (7.5)
A CWE-200: Information Exposure vulnerability exists that could cause the exposure of sensitive information stored on the memory of the controller when communicating over the Modbus TCP protocol. Affected Products: Modicon M340 CPU (part numbers BMXP34*) (Versions prior to V3.30), Modicon M580 CPU (part numbers BMEP* and BMEH*) (Versions prior to SV3.20), Modicon MC80 (BMKC80) (Versions prior to V1.6), Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) (All Versions), Modicon Momentum MDI (171CBU*) (Versions prior to V2.3), Legacy Modicon Quantum (All Versions)
Published: 2023-02-01T00:00:00.000Z
Updated: 2025-02-05T20:06:44.280Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.