CVE-2013-2761: Schneider Electric Modicon m340

Medium severity, CVSS 4.0. EPSS: 1.4% chance of exploitation in the next 30 days.

The Schneider Electric M340 BMXNOE01xx and BMXP3420xx PLC modules allow remote authenticated users to cause a denial of service (module crash) via crafted FTP traffic, as demonstrated by the FileZilla FTP client.

Affected products

• Schneider Electric Modicon m340: version bmxnoe01xx only; version bmxp3420xx only

Published 2013-04-04. Last modified 2026-06-16.