CVE-2011-4859: Schneider Electric m340 Ethernet Module BMXNOE0100
High severity, CVSS 10.0. EPSS: 3.9% chance of exploitation in the next 30 days.
The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771* and 140CPU65* modules, the Premium TSXETY* and TSXP57* modules, the M340 BMXNOE01* and BMXP3420* modules, and the STB DIO STBNIC2212 and STBNIP2* modules, uses hardcoded passwords for the (1) AUTCSE, (2) AUT_CSE, (3) fdrusers, (4) ftpuser, (5) loader, (6) nic2212, (7) nimrohs2212, (8) nip2212, (9) noe77111_v500, (10) ntpupdate, (11) pcfactory, (12) sysdiag, (13) target, (14) test, (15) USER, and (16) webserver accounts, which makes it easier for remote attackers to obtain access via the (a) TELNET, (b) Windriver Debug, or (c) FTP port.
Affected products
- Schneider Electric m340 Ethernet Module BMXNOE0100: up to and including 2.3
- Schneider Electric m340 Ethernet Module BMXNOE0110: up to and including 4.65
- Schneider Electric m340 Ethernet Module BMXP342020: up to and including 2.2
- Schneider Electric m340 Ethernet Module BMXP342030: up to and including 2.2
- Schneider Electric Premium Ethernet Module TSXETY4103: up to and including 5.0
- Schneider Electric Premium Ethernet Module TSXETY5103: up to and including 5.0
- Schneider Electric Premium Ethernet Module TSXP57163M: up to and including 4.9
- Schneider Electric Premium Ethernet Module TSXP572634M: up to and including 4.9
- Schneider Electric Premium Ethernet Module TSXP573634M: up to and including 4.9
- Schneider Electric Premium Ethernet Module TSXP574634M: up to and including 3.5
- Schneider Electric Premium Ethernet Module TSXP575634M: up to and including 3.5
- Schneider Electric Premium Ethernet Module TSXP576634M: up to and including 3.5
- Schneider Electric Quantum Ethernet Module 140cpu65150: up to and including 3.5
- Schneider Electric Quantum Ethernet Module 140cpu65160: up to and including 3.5
- Schneider Electric Quantum Ethernet Module 140cpu65260: up to and including 3.5
- Schneider Electric Quantum Ethernet Module 140noe77100: up to and including 3.3; up to and including 3.4
- Schneider Electric Quantum Ethernet Module 140noe77101: up to and including 4.9
- Schneider Electric Quantum Ethernet Module 140noe77111: up to and including 5.0
- Schneider Electric Stb Dio Ethernet Module STBNIC2212: up to and including 2.10
- Schneider Electric Stb Dio Ethernet Module STBNIP2212: up to and including 2.73
- Schneider Electric Stb Dio Ethernet Module STBNIP2311: up to and including 3.01
Published 2011-12-17. Last modified 2026-06-16.