NetSight
IP …
high7.5

CVE-2020-7539

A CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modico…

Impact

A CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause a denial of service vulnerability when a specially crafted packet is sent to the controller over HTTP.

Affected products

VendorProductAffected versions
Schneider-ElectricModicon M340 Bmxp341000 Firmware
before 3.30
Schneider-ElectricModicon M340 Bmxp342000 Firmware
before 3.30
Schneider-ElectricModicon M340 Bmxp3420102 Firmware
before 3.30
Schneider-ElectricModicon M340 Bmxp3420102cl Firmware
before 3.30
Schneider-ElectricModicon M340 Bmxp342020 Firmware
before 3.30
Schneider-ElectricModicon M340 Bmxp3420302 Firmware
before 3.30
Schneider-ElectricModicon M340 Bmxp3420302cl Firmware
before 3.30
Schneider-ElectricBmxnoe0100 Firmware
before 3.3
Schneider-ElectricBmxnoe0110 Firmware
before 6.5
Schneider-ElectricBmxnoc0401 Firmware
before 2.10
Schneider-ElectricTsxp574634 Firmware
before 6.1
Schneider-ElectricTsxp575634 Firmware
before 6.1

Weakness classification

CWE-754

References