Schneider Electric Modicon M340 CPU (part numbers BMXP34*)
12 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2024-8936 | Versions prior to SV3.65 | CWE-20: Improper Input Validation vulnerability exists that could lead to loss of confidentiality of controller memory after a successful Ma | HIGH 8.3 | 0.5 % | ||
| CVE-2024-8938 | Versions prior to SV3.65 | CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a potential arbitrary | CRITICAL 9.2 | 0.5 % | ||
| CVE-2024-8937 | Versions prior to SV3.65 | CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a potential arbitrary | HIGH 8.3 | 0.6 % | ||
| CVE-2024-8935 | All versions since SV3.60 | CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause a denial of service and loss of confidentiality and integri | HIGH 7.7 | 0.5 % | ||
| CVE-2024-8933 | All versions | CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause retr | HIGH 7.5 | 0.3 % | ||
| CVE-2023-6408 | Versions prior to sv3.60 | CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause a de | HIGH 8.1 | 0.3 % | ||
| CVE-2023-25620 | prior to SV3.51 | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller wh | MEDIUM 6.5 | 0.6 % | ||
| CVE-2023-25619 | prior to SV3.51 | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller wh | HIGH 7.5 | 0.6 % | ||
| CVE-2021-22786 | All – < V3.30 | A CWE-200: Information Exposure vulnerability exists that could cause the exposure of sensitive information stored on the memory of the cont | HIGH 7.5 | 0.6 % | ||
| CVE-2022-45789 | All Versions | A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbus functions on the c | CRITICAL 9.8 | 1.5 % | ||
| CVE-2022-45788 | All Versions | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code execution, denial of se | CRITICAL 9.8 | 1.2 % | ||
| CVE-2022-37301 | V – 3.40 | A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory | HIGH 7.5 | 0.8 % |