Schneider-Electric Modicom M340 -
Approved changes feed: RSS · Atom
cpe:2.3:h:schneider-electric:modicom_m340:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Schneider Electric (e6a779d5-aeb8-5b94-be36-761d5c05741c) |
|---|---|
| Product | Modicom M340 (6339a456-936b-5848-b845-a17cd755e5fe) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-5056 |
vulnerable | 2026-06-08 06:56:14.730964 |
Details available
MEDIUM (6.5)
CWE-552: Files or Directories Accessible to External Parties vulnerability exists which may
prevent user to update the device firmware and prevent proper behavior of the webserver when
specific files or directories are removed from the filesystem.
Published: 2024-06-12T12:10:43.250Z
Updated: 2024-08-01T21:03:10.683Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-7833 |
not_vulnerable | 2026-06-08 05:12:04.490513 |
Details available
An Improper Check for Unusual or Exceptional Conditions vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where an unauthenticated user can send a specially crafted XML data via a POST request to cause the web server to become unavailable
Published: 2018-12-17T22:00:00.000Z
Updated: 2024-08-05T06:37:59.565Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-7831 |
not_vulnerable | 2026-06-08 05:12:04.435652 |
Details available
An Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 allowing an attacker to send a specially crafted URL to a currently authenticated web server user to execute a password change on the web server.
Published: 2018-11-30T19:00:00.000Z
Updated: 2024-08-05T06:37:59.349Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-7830 |
not_vulnerable | 2026-06-08 05:12:04.434781 |
Details available
Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where a denial of service can occur for ~1 minute by sending a specially crafted HTTP request.
Published: 2018-11-30T19:00:00.000Z
Updated: 2024-08-05T06:37:59.474Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-7812 |
not_vulnerable | 2026-06-08 05:12:04.294070 |
Details available
An Information Exposure through Discrepancy vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where the web server sends different responses in a way that exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.
Published: 2018-12-17T22:00:00.000Z
Updated: 2024-08-05T06:37:59.305Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-7811 |
not_vulnerable | 2026-06-08 05:12:04.293486 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-7810 |
not_vulnerable | 2026-06-08 05:12:04.292887 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-7809 |
not_vulnerable | 2026-06-08 05:12:04.292166 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-7804 |
not_vulnerable | 2026-06-08 05:12:04.281417 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.