Schneider Electric Modicon M340 Bmx P34 2010 vulnerabilities

2 vulnerabilities

Known vulnerabilities in Schneider Electric Modicon M340 Bmx P34 2010, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5CVE-2013-2763schneider-electricmodicon_m340_bmx_noc_0401_firmware+11
EPSS score
2.13%
The Schneider Electric M340 PLC modules allow remote attackers to cause a denial of service (resource consumption) via unspecified vectors. NOTE: the vendor reportedly disputes this issue because it "could not be duplicated" and "an attacker could not remotely exploit this observed behavior to deny PLC control functions.7.5CVE-2022-37301schneider electriclegacy modicon quantum/premium+52
EPSS score
0.75%
A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus TCP protocol. Affected products: Modicon M340 CPU (part numbers BMXP34*)(V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*)(V3.22 and prior), Legacy Modicon Quantum/Premium(All Versions), Modicon Momentum MDI (171CBU*)(All Versions), Modicon MC80 (BMKC80)(V1.7 and prior)