MM
Product
Modicon M340 Firmware
39
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 24Medium 10Low 0
Watch
Add Modicon M340 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-7475 | 9.8 | Mar 23 | A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), reflective DLL, vulnerability exists in EcoStruxure Control Expert… Affected: before 3.20 |
| CVE-2019-6808 | 9.8 | May 22 | A CWE-284: Improper Access Control vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a remote code… Affected: before 3.10 |
| CVE-2018-7847 | 9.8 | May 22 | A CWE-284: Improper Access Control vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service… Affected: All versions, or not specified |
| CVE-2018-7846 | 9.8 | May 22 | A CWE-501: Trust Boundary Violation vulnerability on connection to the Controller exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and Modicon Premium… Affected: All versions, or not specified |
| CVE-2018-7842 | 9.8 | May 22 | A CWE-290: Authentication Bypass by Spoofing vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause an… Affected: All versions, or not specified |
| CVE-2023-25619 | 7.5 | Apr 19 | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when communicating over the Modbus TCP… Affected: before 3.51 |
| CVE-2019-6857 | 7.5 | Jan 6 | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for… Affected: before 3.01 |
| CVE-2019-6856 | 7.5 | Jan 6 | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for… Affected: before 3.01 |
| CVE-2018-7794 | 7.5 | Jan 6 | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for… Affected: before 3.01 |
| CVE-2019-6851 | 7.5 | Oct 29 | A CWE-538: File and Directory Information Exposure vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (all firmware versions), which could cause… Affected: All versions, or not specified |
| CVE-2019-6845 | 7.5 | Oct 29 | A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (all firmware versions), which… Affected: All versions, or not specified |
| CVE-2019-6829 | 7.5 | Sep 17 | A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware version prior to V2.90) and Modicon M340 (firmware version prior to V3.10), which could cause a… Affected: before 3.10 |
| CVE-2019-6828 | 7.5 | Sep 17 | A CWE-248: Uncaught Exception vulnerability exists Modicon M580 (firmware version prior to V2.90), Modicon M340 (firmware version prior to V3.10), Modicon Premium (all versions),… Affected: before 3.10 |
| CVE-2019-6813 | 7.5 | Sep 17 | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module (all firmware versions) and Modicon M340… Affected: All versions, or not specified |
| CVE-2019-6809 | 7.5 | Sep 17 | A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware versions prior to V2.90), Modicon M340 (firmware versions prior to V3.10), Modicon Premium (all… Affected: before 3.10 |
| CVE-2019-6807 | 7.5 | May 22 | A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible denial of… Affected: before 3.10 |
| CVE-2019-6806 | 7.5 | May 22 | A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of… Affected: before 3.10 |
| CVE-2018-7857 | 7.5 | May 22 | A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible Denial of… Affected: before 3.01 |
| CVE-2018-7856 | 7.5 | May 22 | A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible denial of… Affected: before 3.10 |
| CVE-2018-7855 | 7.5 | May 22 | A CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a Denial of Service… Affected: before 3.10 |
| CVE-2018-7854 | 7.5 | May 22 | A CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a denial of Service… Affected: before 3.10 |
| CVE-2018-7853 | 7.5 | May 22 | A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when… Affected: before 3.10 |
| CVE-2018-7844 | 7.5 | May 22 | A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of… Affected: All versions, or not specified |
| CVE-2019-6819 | 7.5 | May 22 | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists which could cause a possible Denial of Service when specific Modbus frames are sent to the… Affected: before 3.01 |
| CVE-2018-7852 | 7.5 | May 22 | A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when… Affected: All versions, or not specified |
| CVE-2018-7849 | 7.5 | May 22 | A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and Modicon Premium which could cause a possible Denial of… Affected: All versions, or not specified |
| CVE-2018-7848 | 7.5 | May 22 | A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of… Affected: before 3.10 |
| CVE-2018-7845 | 7.5 | May 22 | A CWE-125: Out-of-bounds Read vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of… Affected: All versions, or not specified |
| CVE-2018-7843 | 7.5 | May 22 | A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when… Affected: All versions, or not specified |
| CVE-2024-5056 | 6.5 | Jun 12 | CWE-552: Files or Directories Accessible to External Parties vulnerability exists which may prevent user to update the device firmware and prevent proper behavior of the webserver… Affected: All versions, or not specified |
| CVE-2023-25620 | 6.5 | Apr 19 | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when a malicious project file is loaded… Affected: before 3.51 |
| CVE-2019-6846 | 6.5 | Oct 29 | A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which… Affected: All versions, or not specified |
| CVE-2019-6821 | 6.5 | May 22 | CWE-330: Use of Insufficiently Random Values vulnerability, which could cause the hijacking of the TCP connection when using Ethernet communication in Modicon M580 firmware… Affected: All versions, or not specified |
| CVE-2018-7850 | 5.3 | May 22 | A CWE-807: Reliance on Untrusted Inputs in a Security Decision vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which… Affected: All versions, or not specified |
| CVE-2019-6847 | 4.9 | Oct 29 | A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could… Affected: All versions, or not specified |
| CVE-2019-6844 | 4.9 | Oct 29 | A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could… Affected: All versions, or not specified |
| CVE-2019-6843 | 4.9 | Oct 29 | A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 with firmware (version prior to V3.10), Modicon M340 (all firmware versions), and… Affected: All versions, or not specified |
| CVE-2019-6842 | 4.9 | Oct 29 | A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could… Affected: All versions, or not specified |
| CVE-2019-6841 | 4.9 | Oct 29 | A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 with firmware (version prior to V3.10), Modicon M340 (all firmware versions), and… Affected: All versions, or not specified |
Showing 39