Login Request a demo
MM
Product
Modicon M340
by Schneider Electric · last CVE Aug 18, 2025
7
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 0High 3Medium 1Low 0
Severity
All severities7Critical0High3Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Modicon M340 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-8938
8.1
1%
Nov 13
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a potential arbitrary code execution after a successful…
Affected: before SV3.65
CVE-2025-6625
7.5
0%
Aug 18
CWE-20: Improper Input Validation vulnerability exists that could cause a Denial Of Service when specific crafted FTP command is sent to the device
Affected: All versions
CVE-2024-8933
7.5
0%
Nov 13
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause retrieval of password hash that could lead…
Affected: 0
CVE-2024-5056
6.5
0%
Jun 12
CWE-552: Files or Directories Accessible to External Parties vulnerability exists which may prevent user to update the device firmware and prevent proper behavior of the webserver…
Affected: All versions
CVE-2013-2761
–
1%
Apr 4
The Schneider Electric M340 BMXNOE01xx and BMXP3420xx PLC modules allow remote authenticated users to cause a denial of service (module crash) via crafted FTP traffic, as…
Affected: bmxnoe01xx; bmxp3420xx
CVE-2013-0664
–
4%
Apr 4
The FactoryCast service on the Schneider Electric Quantum 140NOE77111 and 140NWM10000, M340 BMXNOE0110x, and Premium TSXETY5103 PLC modules allows remote authenticated users to…
Affected: bmxnoe0110x
CVE-2013-0663
–
6%
Apr 4
Cross-site request forgery (CSRF) vulnerability on the Schneider Electric Quantum 140NOE77111, 140NOE77101, and 140NWM10000; M340 BMXNOC0401, BMXNOE0100x, and BMXNOE011xx; and…
Affected: bmxnoc0401; bmxnoe011xx; bmxnoe0100x
Showing 7