Modicon M340 Bmxp342020 Firmware vulnerabilities | LiveThreat CVE Feed

Product

Modicon M340 Bmxp342020 Firmware

by Schneider-electric · last CVE Feb 14, 2024

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities32 In the news0 Timeline

Severity mix

Critical 9High 17Medium 4Low 0

Severity

All severities32 Critical9 High17 Medium4 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Modicon M340 Bmxp342020 Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2022-45789	9.8	1%	Jan 31	A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbus functions on the controller when hijacking an… Affected: All versions, or not specified
CVE-2022-45788	9.8	1%	Jan 30	A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality &… Affected: All versions, or not specified
CVE-2022-37300	9.8	1%	Sep 12	A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists that could cause unauthorized access in read and write mode to the controller when… Affected: before 3.50
CVE-2020-7540	9.8	2%	Dec 11	A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated… Affected: before 3.30
CVE-2018-7761	9.8	2%	Apr 18	A vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow arbitrary code execution Affected: All versions, or not specified
CVE-2018-7760	9.8	1%	Apr 18	An authorization bypass vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 Affected: All versions, or not specified
CVE-2018-7242	9.8	2%	Apr 18	Vulnerable hash algorithms exists in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules Affected: All versions, or not specified
CVE-2018-7241	9.8	4%	Apr 18	Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules Affected: All versions, or not specified
CVE-2021-22779	9.1	1%	Jul 14	Authentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Control… Affected: All versions, or not specified