Approved changes feed: RSS · Atom

cpe:2.3:o:schneider-electric:modicon_m340_bmxp342020_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

VendorSchneider Electric (e6a779d5-aeb8-5b94-be36-761d5c05741c)
ProductModicon M340 Bmxp342020 Firmware (9b12f216-dac8-54ad-b22a-1ac8abf92d6f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-6408 vulnerable 2026-06-08 06:19:47.257479 Details available
HIGH (8.1)
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause a denial of service and loss of confidentiality, integrity of controllers when conducting a Man in the Middle attack.
Published: 2024-02-14T16:52:24.805Z
Updated: 2024-08-02T08:28:21.776Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45788 vulnerable 2026-06-08 05:50:36.702347 Details available
HIGH (7.5)
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when a malicious project file is loaded onto the controller. Affected Products: EcoStruxure Control Expert (All Versions), EcoStruxure Process Expert (All Versions), Modicon M340 CPU - part numbers BMXP34* (All Versions), Modicon M580 CPU - part numbers BMEP* and BMEH* (All Versions), Modicon M580 CPU Safety - part numbers BMEP58*S and BMEH58*S (All Versions), Modicon Momentum Unity M1E Processor - 171CBU* (All Versions), Modicon MC80 - BMKC80 (All Versions), Legacy Modicon Quantum - 140CPU65* and Premium CPUs - TSXP57* (All Versions)
Published: 2023-01-30T00:00:00.000Z
Updated: 2026-05-29T14:08:52.615Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7762 vulnerable 2026-06-08 05:12:04.160816 Details available
A vulnerability exists in the web services to process SOAP requests in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow result in a buffer overflow.
Published: 2018-04-18T20:00:00.000Z
Updated: 2024-08-05T06:37:58.095Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7761 vulnerable 2026-06-08 05:12:04.145695 Details available
A vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow arbitrary code execution.
Published: 2018-04-18T20:00:00.000Z
Updated: 2024-08-05T06:37:57.953Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7760 vulnerable 2026-06-08 05:12:04.127122 Details available
An authorization bypass vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. Requests to CGI functions allow malicious users to bypass authorization.
Published: 2018-04-18T20:00:00.000Z
Updated: 2024-08-05T06:37:59.111Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7759 vulnerable 2026-06-08 05:12:04.111048 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7242 vulnerable 2026-06-08 05:12:03.488438 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7241 vulnerable 2026-06-08 05:12:03.444555 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6462 vulnerable 2026-06-08 05:06:52.497881 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6461 vulnerable 2026-06-08 05:06:52.489585 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0754 vulnerable 2026-06-08 05:05:14.217066 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2763 vulnerable 2026-06-08 05:04:27.807598 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.