CVE-2015-6462: Schneider Electric BMXNOC0401 Firmware

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

Reflected Cross-Site Scripting (nonpersistent) allows an attacker to craft a specific URL, which contains Java script that will be executed on the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, or BMXP342030H PLC client browser.

Affected products

• Schneider Electric BMXNOC0401 Firmware: affected versions not specified
• Schneider Electric BMXNOE0100 Firmware: affected versions not specified
• Schneider Electric BMXNOE0110 Firmware: affected versions not specified
• Schneider Electric BMXNOE0110H Firmware: affected versions not specified
• Schneider Electric BMXNOR0200H Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP342020 Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP342020H Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP3420302 Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP3420302H Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP342030 Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP342030H Firmware: affected versions not specified

Published 2019-03-21. Last modified 2026-06-17.