Approved changes feed: RSS · Atom

cpe:2.3:h:schneider-electric:modicon_m340_bmx_noe_0100:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorSchneider Electric (e6a779d5-aeb8-5b94-be36-761d5c05741c)
ProductModicon M340 Bmx Noe 0100 (8ec33b60-e5e8-5b14-be44-d9d84124f922)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-7564 not_vulnerable 2026-06-08 05:27:13.584493 Details available
A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause write access and the execution of commands when uploading a specially crafted file on the controller over FTP.
Published: 2020-11-18T13:51:16.000Z
Updated: 2026-05-29T13:25:41.819Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7563 not_vulnerable 2026-06-08 05:27:13.581895 Details available
A CWE-787: Out-of-bounds Write vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause corruption of data, a crash, or code execution when uploading a specially crafted file on the controller over FTP.
Published: 2020-11-18T13:50:57.000Z
Updated: 2026-05-29T13:24:10.642Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7562 not_vulnerable 2026-06-08 05:27:13.571476 Details available
A CWE-125: Out-of-Bounds Read vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause a segmentation fault or a buffer overflow when uploading a specially crafted file on the controller over FTP.
Published: 2020-11-18T13:54:32.000Z
Updated: 2026-05-29T13:21:41.514Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2763 not_vulnerable 2026-06-08 05:04:27.796572 Details available
The Schneider Electric M340 PLC modules allow remote attackers to cause a denial of service (resource consumption) via unspecified vectors. NOTE: the vendor reportedly disputes this issue because it "could not be duplicated" and "an attacker could not remotely exploit this observed behavior to deny PLC control functions.
Published: 2013-04-04T10:00:00.000Z
Updated: 2024-09-17T03:23:58.044Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.