Modicon M340 Cpu Part Numbers Bmxp34 (Schneider Electric) - vulnerabilities (CVEs)
12 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-11-13. Vendor: Schneider Electric.
CVEs of Modicon M340 Cpu Part Numbers Bmxp34
- CVE-2024-8938 - CVSS 9.2 (critical), 2024-11-13: CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a potential arbitrary code execution…
- CVE-2024-8937 - CVSS 8.3 (high), 2024-11-13: CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a potential arbitrary code execution…
- CVE-2024-8936 - CVSS 8.3 (high), 2024-11-13: CWE-20: Improper Input Validation vulnerability exists that could lead to loss of confidentiality of controller memory after a successful Man-In-The-Middle…
- CVE-2024-8935 - CVSS 7.7 (high), 2024-11-13: CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause a denial of service and loss of confidentiality and integrity of controllers…
- CVE-2024-8933 - CVSS 7.5 (high), 2024-11-13: CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause retrieval of password…
- CVE-2023-6408 - CVSS 8.1 (high), 2024-02-14: CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause a denial of service…
- CVE-2023-25620 - CVSS 6.5 (medium), 2023-04-19: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when a malicious…
- CVE-2023-25619 - CVSS 7.5 (high), 2023-04-19: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when communicating…
- CVE-2021-22786 - CVSS 7.5 (high), 2023-02-01: A CWE-200: Information Exposure vulnerability exists that could cause the exposure of sensitive information stored on the memory of the controller when…
- CVE-2022-45789 - CVSS 9.8 (critical), 2023-01-31: A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbus functions on the controller when…
- CVE-2022-45788 - CVSS 9.8 (critical), 2023-01-30: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code execution, denial of service and loss of…
- CVE-2022-37301 - CVSS 7.5 (high), 2022-11-22: A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations…
