Schneider Electric Modicon M340 vulnerabilities

2 vulnerabilities

Known vulnerabilities in Schneider Electric Modicon M340, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.7CVE-2025-6625schneider electricbmxngd0100: m580 global data module+5
EPSS score
0.50%
CWE-20: Improper Input Validation vulnerability exists that could cause a Denial Of Service when specific crafted FTP command is sent to the device.6.5CVE-2024-5056schneider electricmodicon m340+2
EPSS score
0.35%
CWE-552: Files or Directories Accessible to External Parties vulnerability exists which may prevent user to update the device firmware and prevent proper behavior of the webserver when specific files or directories are removed from the filesystem.