Approved changes feed: RSS · Atom

cpe:2.3:o:schneider-electric:modicon_m340_bmxp342000_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

VendorSchneider Electric (e6a779d5-aeb8-5b94-be36-761d5c05741c)
ProductModicon M340 Bmxp342000 Firmware (5c307af9-64f5-5bdd-a0c9-bcdab9f49416)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-6408 vulnerable 2026-06-08 06:19:47.253658 Details available
HIGH (8.1)
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause a denial of service and loss of confidentiality, integrity of controllers when conducting a Man in the Middle attack.
Published: 2024-02-14T16:52:24.805Z
Updated: 2024-08-02T08:28:21.776Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45788 vulnerable 2026-06-08 05:50:36.697080 Details available
HIGH (7.5)
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when a malicious project file is loaded onto the controller. Affected Products: EcoStruxure Control Expert (All Versions), EcoStruxure Process Expert (All Versions), Modicon M340 CPU - part numbers BMXP34* (All Versions), Modicon M580 CPU - part numbers BMEP* and BMEH* (All Versions), Modicon M580 CPU Safety - part numbers BMEP58*S and BMEH58*S (All Versions), Modicon Momentum Unity M1E Processor - 171CBU* (All Versions), Modicon MC80 - BMKC80 (All Versions), Legacy Modicon Quantum - 140CPU65* and Premium CPUs - TSXP57* (All Versions)
Published: 2023-01-30T00:00:00.000Z
Updated: 2026-05-29T14:08:52.615Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22724 vulnerable 2026-06-08 05:40:55.102077 Details available
A CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of service on ports 80 (HTTP) and 502 (Modbus), when sending a large number of TCP RST or FIN packets to any open TCP port of the PLC. Affected Product: Modicon M340 CPUs: BMXP34 (All Versions)
Published: 2022-02-04T22:29:36.000Z
Updated: 2024-08-03T03:21:49.119Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7762 vulnerable 2026-06-08 05:12:04.160547 Details available
A vulnerability exists in the web services to process SOAP requests in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow result in a buffer overflow.
Published: 2018-04-18T20:00:00.000Z
Updated: 2024-08-05T06:37:58.095Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7761 vulnerable 2026-06-08 05:12:04.145401 Details available
A vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow arbitrary code execution.
Published: 2018-04-18T20:00:00.000Z
Updated: 2024-08-05T06:37:57.953Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7760 vulnerable 2026-06-08 05:12:04.126859 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7759 vulnerable 2026-06-08 05:12:04.110862 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7242 vulnerable 2026-06-08 05:12:03.488336 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7241 vulnerable 2026-06-08 05:12:03.440043 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.