Unscored severity · published Apr 4, 2013
CVE-2013-2763
The Schneider Electric M340 PLC modules allow remote attackers to cause a denial of service (resource consumption) via unspecified vectors
–
CVSS
2.1%
EPSS
No
On KEV
Description
The Schneider Electric M340 PLC modules allow remote attackers to cause a denial of service (resource consumption) via unspecified vectors. NOTE: the vendor reportedly disputes this issue because it "could not be duplicated" and "an attacker could not remotely exploit this observed behavior to deny PLC control functions.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MM
Modicon M340 Bmx Noc 0401 Firmware · Schneider-electric
All versions, or not specified · source: NVD
MM
Modicon M340 Bmx Noe 0100 Firmware · Schneider-electric
All versions, or not specified · source: NVD
MM
Modicon M340 Bmx Noe 0100h Firmware · Schneider-electric
All versions, or not specified · source: NVD
MM
Modicon M340 Bmx Noe 0110 Firmware · Schneider-electric
All versions, or not specified · source: NVD
MM
Modicon M340 Bmx Noe 0110h Firmware · Schneider-electric
All versions, or not specified · source: NVD
MM
Modicon M340 Bmx Nor 0200h Firmware · Schneider-electric
All versions, or not specified · source: NVD
MM
Modicon M340 Bmx P34-2010 Firmware · Schneider-electric
All versions, or not specified · source: NVD
MM
Modicon M340 Bmx P34-2030 Firmware · Schneider-electric
All versions, or not specified · source: NVD
MM
Modicon M340 Bmxp341000 Firmware · Schneider-electric
All versions, or not specified · source: NVD
MM
Modicon M340 Bmxp342010 Firmware · Schneider-electric
All versions, or not specified · source: NVD
MM
Modicon M340 Bmxp342020 Firmware · Schneider-electric
All versions, or not specified · source: NVD
MM
Modicon M340 Bmxp342030 Firmware · Schneider-electric
All versions, or not specified · source: NVD
Affected product
MM
Modicon M340 Bmx Noc 0401 Firmware
Schneider-electric
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-2763
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-2763
Broken Link
http://ics-cert.us-cert.gov/pdf/ICSA-13-077-01A.pdf
More from Modicon M340 Bmx Noc 0401 Firmware
8.8
CVE-2020-7564
A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium…
8.8
CVE-2020-7563
A CWE-787: Out-of-bounds Write vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see…
8.1
CVE-2020-7562
A CWE-125: Out-of-Bounds Read vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see…