CVEvulnerability

CVE-2020-7536

7.5 HIGH Published 2020-12-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-12-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-754

Description

A CWE-754:Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M340 CPUs (BMXP34* versions prior to V3.30) Modicon M340 Communication Ethernet modules (BMXNOE0100 (H) versions prior to V3.4 BMXNOE0110 (H) versions prior to V6.6 BMXNOR0200H all versions), that could cause the device to be unreachable when modifying network parameters over SNMP.

Affected configurations

• schneider-electric modicon m340 bmxp341000 firmware (< 3.30) • schneider-electric modicon m340 bmxp342000 firmware (< 3.30) • schneider-electric modicon m340 bmxp3420102 firmware (< 3.30) • schneider-electric modicon m340 bmxp3420102cl firmware (< 3.30) • schneider-electric modicon m340 bmxp342020 firmware (< 3.30) • schneider-electric modicon m340 bmxp3420302 firmware (< 3.30) • schneider-electric modicon m340 bmxp3420302cl firmware (< 3.30) • schneider-electric bmxnoe0100 firmware (< 3.4) • schneider-electric bmxnoe0110 firmware (< 6.6) • schneider-electric bmxnor0200h firmware

Related

Weakness · CWE (1)

  • CWE-754 Improper Check for Unusual or Exceptional Conditions weakness

References