Modicon M340 Firmware vulnerabilities | LiveThreat CVE Feed

Product

Modicon M340 Firmware

by Schneider-electric · last CVE Jun 12, 2024

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities39 In the news0 Timeline

Severity mix

Critical 5High 24Medium 10Low 0

Severity

All severities39 Critical5 High24 Medium10 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Modicon M340 Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-5056	6.5	0%	Jun 12	CWE-552: Files or Directories Accessible to External Parties vulnerability exists which may prevent user to update the device firmware and prevent proper behavior of the webserver… Affected: All versions, or not specified
CVE-2023-25620	6.5	1%	Apr 19	A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when a malicious project file is loaded… Affected: before 3.51
CVE-2019-6846	6.5	1%	Oct 29	A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which… Affected: All versions, or not specified
CVE-2019-6821	6.5	2%	May 22	CWE-330: Use of Insufficiently Random Values vulnerability, which could cause the hijacking of the TCP connection when using Ethernet communication in Modicon M580 firmware… Affected: All versions, or not specified
CVE-2018-7850	5.3	2%	May 22	A CWE-807: Reliance on Untrusted Inputs in a Security Decision vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which… Affected: All versions, or not specified
CVE-2019-6847	4.9	1%	Oct 29	A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could… Affected: All versions, or not specified
CVE-2019-6844	4.9	1%	Oct 29	A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could… Affected: All versions, or not specified
CVE-2019-6843	4.9	1%	Oct 29	A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 with firmware (version prior to V3.10), Modicon M340 (all firmware versions), and… Affected: All versions, or not specified
CVE-2019-6842	4.9	1%	Oct 29	A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could… Affected: All versions, or not specified
CVE-2019-6841	4.9	24%	Oct 29	A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 with firmware (version prior to V3.10), Modicon M340 (all firmware versions), and… Affected: All versions, or not specified