Bmxnor0200h Firmware (Schneider-electric) - vulnerabilities (CVEs)
14 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2022-02-04. Vendor: Schneider-electric.
CVEs of Bmxnor0200h Firmware
- CVE-2020-7534 - CVSS 8.8 (high), 2022-02-04: A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists on the web server used, that could cause a leak of sensitive data or unauthorized actions on…
- CVE-2020-7536 - CVSS 7.5 (high), 2020-12-11: A CWE-754:Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M340 CPUs (BMXP34* versions prior to V3.30) Modicon M340…
- CVE-2019-6831 - CVSS 8.6 (high), 2019-09-17: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module (all firmware versions),…
- CVE-2019-6813 - CVSS 7.5 (high), 2019-09-17: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module (all firmware versions) and…
- CVE-2019-6810 - CVSS 8.8 (high), 2019-09-17: CWE-284: Improper Access Control vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module (all firmware versions), which could cause the execution of…
- CVE-2015-6461 - CVSS 5.4 (medium), 2019-03-21: Remote file inclusion allows an attacker to craft a specific URL referencing the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H,…
- CVE-2015-6462 - CVSS 5.4 (medium), 2019-03-21: Reflected Cross-Site Scripting (nonpersistent) allows an attacker to craft a specific URL, which contains Java script that will be executed on the Schneider…
- CVE-2018-7241 - CVSS 9.8 (critical), 2018-04-18: Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the…
- CVE-2018-7760 - CVSS 9.8 (critical), 2018-04-18: An authorization bypass vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. Requests to CGI functions…
- CVE-2018-7759 - CVSS 7.5 (high), 2018-04-18: A buffer overflow vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. The buffer overflow…
- CVE-2018-7762 - CVSS 7.5 (high), 2018-04-18: A vulnerability exists in the web services to process SOAP requests in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200…
- CVE-2018-7242 - CVSS 9.8 (critical), 2018-04-18: Vulnerable hash algorithms exists in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the…
- CVE-2018-7761 - CVSS 9.8 (critical), 2018-04-18: A vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow…
- CVE-2017-6017 - CVSS 7.5 (high), 2017-06-30: A Resource Exhaustion issue was discovered in Schneider Electric Modicon M340 PLC BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP341000,…
