Known Vulnerabilities for Bmxp342020h Firmware by Schneider-electric
Listed below are 9 of the newest known vulnerabilities associated with "Bmxp342020h Firmware" by "Schneider-electric".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
CVE | Shortened Description | Severity | Publish Date | Last Modified |
---|---|---|---|---|
CVE-2018-7762 | A vulnerability exists in the web services to process SOAP requests in Schneider Electric's Modicon M340, Modicon Premium, Mo... | 7.5 - HIGH | 2018-04-18 | 2018-05-24 |
CVE-2018-7761 | A vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC,... | 9.8 - CRITICAL | 2018-04-18 | 2018-05-24 |
CVE-2018-7760 | An authorization bypass vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXN... | 9.8 - CRITICAL | 2018-04-18 | 2018-05-24 |
CVE-2018-7759 | A buffer overflow vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200... | 7.5 - HIGH | 2018-04-18 | 2018-05-24 |
CVE-2018-7242 | Vulnerable hash algorithms exists in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 cont... | 9.8 - CRITICAL | 2018-04-18 | 2018-12-05 |
CVE-2018-7241 | Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers ... | 9.8 - CRITICAL | 2018-04-18 | 2018-12-05 |
CVE-2017-6017 | A Resource Exhaustion issue was discovered in Schneider Electric Modicon M340 PLC BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0... | 7.5 - HIGH | 2017-06-30 | 2018-12-24 |
CVE-2015-6462 | Reflected Cross-Site Scripting (nonpersistent) allows an attacker to craft a specific URL, which contains Java script that wi... | 5.4 - MEDIUM | 2019-03-21 | 2019-10-09 |
CVE-2015-6461 | Remote file inclusion allows an attacker to craft a specific URL referencing the Schneider Electric Modicon BMXNOC0401, BMXNO... | 5.4 - MEDIUM | 2019-03-21 | 2019-10-09 |
Known Affected Configurations (CPE V2.3)
Type | Vendor | Product | Version | Update | Edition | Language |
---|---|---|---|---|---|---|
Operating System | Schneider-electric | Bmxp342020h Firmware | - | All | All | All |