CVE-2013-2763

The Schneider Electric M340 PLC modules allow remote attackers to cause a denial of service (resource consumption) via unspecified vectors. NOTE: the vendor reportedly disputes this issue because it "could not be duplicated" and "an attacker could not remotely exploit this observed behavior to deny PLC control functions.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2013-04-04

Last modified

2024-09-17

Weaknesses

CWE-400

Affected products

• Modicon M340 Bmx Noc 0401 Firmware (Schneider-electric)
• Modicon M340 Bmx Noe 0100 Firmware (Schneider-electric)
• Modicon M340 Bmx Noe 0100h Firmware (Schneider-electric)
• Modicon M340 Bmx Noe 0110 Firmware (Schneider-electric)
• Modicon M340 Bmx Noe 0110h Firmware (Schneider-electric)
• Modicon M340 Bmx Nor 0200h Firmware (Schneider-electric)
• Modicon M340 Bmx P34-2010 Firmware (Schneider-electric)
• Modicon M340 Bmx P34-2030 Firmware (Schneider-electric)
• Modicon M340 Bmxp341000 Firmware (Schneider-electric)
• Modicon M340 Bmxp342010 Firmware (Schneider-electric)
• Modicon M340 Bmxp342020 Firmware (Schneider-electric)
• Modicon M340 Bmxp342030 Firmware (Schneider-electric)

References

• http://ics-cert.us-cert.gov/pdf/ICSA-13-077-01A.pdf