Known Vulnerabilities for Bmxp342020h Firmware by Schneider-electric
Listed below are 9 of the newest known vulnerabilities associated with "Bmxp342020h Firmware" by "Schneider-electric".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2018-7762 json | A vulnerability exists in the web services to process SOAP requests in Schneider Electric's Modicon M340, Modicon Premium, Mo... | 7.5 - HIGH | 2018-04-18 | 2018-05-24 |
| CVE-2018-7761 json | A vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC,... | 9.8 - CRITICAL | 2018-04-18 | 2018-05-24 |
| CVE-2018-7760 json | An authorization bypass vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXN... | 9.8 - CRITICAL | 2018-04-18 | 2018-05-24 |
| CVE-2018-7759 json | A buffer overflow vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200... | 7.5 - HIGH | 2018-04-18 | 2018-05-24 |
| CVE-2018-7242 json | Vulnerable hash algorithms exists in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 cont... | 9.8 - CRITICAL | 2018-04-18 | 2018-12-05 |
| CVE-2018-7241 json | Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers ... | 9.8 - CRITICAL | 2018-04-18 | 2018-12-05 |
| CVE-2017-6017 json | A Resource Exhaustion issue was discovered in Schneider Electric Modicon M340 PLC BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0... | 7.5 - HIGH | 2017-06-30 | 2018-12-24 |
| CVE-2015-6462 json | Reflected Cross-Site Scripting (nonpersistent) allows an attacker to craft a specific URL, which contains Java script that wi... | 5.4 - MEDIUM | 2019-03-21 | 2019-10-09 |
| CVE-2015-6461 json | Remote file inclusion allows an attacker to craft a specific URL referencing the Schneider Electric Modicon BMXNOC0401, BMXNO... | 5.4 - MEDIUM | 2019-03-21 | 2019-10-09 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Schneider-electric | Bmxp342020h Firmware | - |