NetSight
medium5.0

CVE-2013-2763

The Schneider Electric M340 PLC modules allow remote attackers to cause a denial of service (resource consumption) via unspecified vectors.

Impact

The Schneider Electric M340 PLC modules allow remote attackers to cause a denial of service (resource consumption) via unspecified vectors. NOTE: the vendor reportedly disputes this issue because it "could not be duplicated" and "an attacker could not remotely exploit this observed behavior to deny PLC control functions.

Affected products

VendorProductAffected versions
Schneider-ElectricModicon M340 Bmx Noc 0401 Firmware
All versions
Schneider-ElectricModicon M340 Bmx Noe 0100 Firmware
All versions
Schneider-ElectricModicon M340 Bmx Noe 0100h Firmware
All versions
Schneider-ElectricModicon M340 Bmx Noe 0110 Firmware
All versions
Schneider-ElectricModicon M340 Bmx Noe 0110h Firmware
All versions
Schneider-ElectricModicon M340 Bmx Nor 0200h Firmware
All versions
Schneider-ElectricModicon M340 Bmx P34-2010 Firmware
All versions
Schneider-ElectricModicon M340 Bmx P34-2030 Firmware
All versions
Schneider-ElectricModicon M340 Bmxp341000 Firmware
All versions
Schneider-ElectricModicon M340 Bmxp342010 Firmware
All versions
Schneider-ElectricModicon M340 Bmxp342020 Firmware
All versions
Schneider-ElectricModicon M340 Bmxp342030 Firmware
All versions

Weakness classification

References