Schneider Electric MODICON M340 BMXP342010 FIRMWARE 3.40

CPE Details

Schneider Electric MODICON M340 BMXP342010 FIRMWARE 3.40
schneider-electric
modicon_m340_bmxp342010_firmware
3.40
2022-09-15
11h19 +00:00
2022-09-15
12h27 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:o:schneider-electric:modicon_m340_bmxp342010_firmware:3.40:*:*:*:*:*:*:*

Informations

Vendor

schneider-electric

Product

modicon_m340_bmxp342010_firmware

Version

3.40

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2023-6408 2024-02-14 16h52 +00:00 CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause a denial of service and loss of confidentiality, integrity of controllers when conducting a Man in the Middle attack.
8.1
High
CVE-2022-0222 2022-11-21 23h00 +00:00 A CWE-269: Improper Privilege Management vulnerability exists that could cause a denial of service of the Ethernet communication of the controller when sending a specific request over SNMP. Affected products: Modicon M340 CPUs(BMXP34* versions prior to V3.40), Modicon M340 X80 Ethernet Communication modules:BMXNOE0100 (H), BMXNOE0110 (H), BMXNOR0200H RTU(BMXNOE* all versions)(BMXNOR* versions prior to v1.7 IR24)
7.5
High
CVE-2022-37300 2022-09-12 15h40 +00:00 A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists that could cause unauthorized access in read and write mode to the controller when communicating over Modbus. Affected Products: EcoStruxure Control Expert Including all Unity Pro versions (former name of EcoStruxure Control Expert) (V15.0 SP1 and prior), EcoStruxure Process Expert, Including all versions of EcoStruxure Hybrid DCS (former name of EcoStruxure Process Expert) (V2021 and prior), Modicon M340 CPU (part numbers BMXP34*) (V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*) (V3.20 and prior).
9.8
Critical
CVE-2021-22779 2021-07-14 12h26 +00:00 Authentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Control Expert V15.0 SP1, EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), SCADAPack RemoteConnect for x70 (all versions), Modicon M580 CPU (all versions - part numbers BMEP* and BMEH*), Modicon M340 CPU (all versions - part numbers BMXP34*), that could cause unauthorized access in read and write mode to the controller by spoofing the Modbus communication between the engineering software and the controller.
9.1
Critical