medium5.0
CVE-2013-2763
The Schneider Electric M340 PLC modules allow remote attackers to cause a denial of service (resource consumption) via unspecified vectors.
Impact
The Schneider Electric M340 PLC modules allow remote attackers to cause a denial of service (resource consumption) via unspecified vectors. NOTE: the vendor reportedly disputes this issue because it "could not be duplicated" and "an attacker could not remotely exploit this observed behavior to deny PLC control functions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | Modicon M340 Bmx Noc 0401 Firmware | All versions |
| Schneider-Electric | Modicon M340 Bmx Noe 0100 Firmware | All versions |
| Schneider-Electric | Modicon M340 Bmx Noe 0100h Firmware | All versions |
| Schneider-Electric | Modicon M340 Bmx Noe 0110 Firmware | All versions |
| Schneider-Electric | Modicon M340 Bmx Noe 0110h Firmware | All versions |
| Schneider-Electric | Modicon M340 Bmx Nor 0200h Firmware | All versions |
| Schneider-Electric | Modicon M340 Bmx P34-2010 Firmware | All versions |
| Schneider-Electric | Modicon M340 Bmx P34-2030 Firmware | All versions |
| Schneider-Electric | Modicon M340 Bmxp341000 Firmware | All versions |
| Schneider-Electric | Modicon M340 Bmxp342010 Firmware | All versions |
| Schneider-Electric | Modicon M340 Bmxp342020 Firmware | All versions |
| Schneider-Electric | Modicon M340 Bmxp342030 Firmware | All versions |