Login Request a demo
BF
Product
Bmxnor0200h Firmware
by Schneider-electric · last CVE Feb 4, 2022
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 4High 8Medium 2Low 0
Severity
All severities14Critical4High8Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Bmxnor0200h Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-7761
9.8
2%
Apr 18
A vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow arbitrary code execution
Affected: All versions, or not specified
CVE-2018-7760
9.8
1%
Apr 18
An authorization bypass vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200
Affected: All versions, or not specified
CVE-2018-7242
9.8
2%
Apr 18
Vulnerable hash algorithms exists in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules
Affected: All versions, or not specified
CVE-2018-7241
9.8
4%
Apr 18
Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules
Affected: All versions, or not specified
CVE-2020-7534
8.8
0%
Feb 4
A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists on the web server used, that could cause a leak of sensitive data or unauthorized actions on the web server…
Affected: All versions, or not specified
CVE-2019-6810
8.8
2%
Sep 17
CWE-284: Improper Access Control vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module (all firmware versions), which could cause the execution of commands by…
Affected: All versions, or not specified
CVE-2019-6831
8.6
1%
Sep 17
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module (all firmware versions), which could cause…
Affected: All versions, or not specified
CVE-2020-7536
7.5
1%
Dec 11
A CWE-754:Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M340 CPUs (BMXP34* versions prior to V3.30) Modicon M340 Communication Ethernet…
Affected: All versions, or not specified
CVE-2019-6813
7.5
2%
Sep 17
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module (all firmware versions) and Modicon M340…
Affected: All versions, or not specified
CVE-2018-7762
7.5
1%
Apr 18
A vulnerability exists in the web services to process SOAP requests in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow result…
Affected: All versions, or not specified
CVE-2018-7759
7.5
1%
Apr 18
A buffer overflow vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200
Affected: All versions, or not specified
CVE-2017-6017
7.5
5%
Jun 30
A Resource Exhaustion issue was discovered in Schneider Electric Modicon M340 PLC BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP341000, BMXP342000,…
Affected: 2.8
CVE-2015-6462
5.4
1%
Mar 21
Reflected Cross-Site Scripting (nonpersistent) allows an attacker to craft a specific URL, which contains Java script that will be executed on the Schneider Electric Modicon…
Affected: All versions, or not specified
CVE-2015-6461
5.4
1%
Mar 21
Remote file inclusion allows an attacker to craft a specific URL referencing the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H,…
Affected: All versions, or not specified
Showing 14