CVE-2015-7937: Schneider Electric BMXNOC0401

High severity, CVSS 10.0. EPSS: 7.4% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the GoAhead Web Server on Schneider Electric Modicon M340 PLC BMXNOx and BMXPx devices allows remote attackers to execute arbitrary code via a long password in HTTP Basic Authentication data.

Affected products

• Schneider Electric BMXNOC0401: affected versions not specified
• Schneider Electric BMXNOE0100: affected versions not specified
• Schneider Electric BMXNOE0100H: affected versions not specified
• Schneider Electric BMXNOE0110: affected versions not specified
• Schneider Electric BMXNOE0110H: affected versions not specified
• Schneider Electric BMXNOR0200: affected versions not specified
• Schneider Electric BMXNOR0200H: affected versions not specified
• Schneider Electric BMXPRA0100: affected versions not specified
• Schneider Electric Modicon m340 BMXP342020: affected versions not specified
• Schneider Electric Modicon m340 BMXP342020H: affected versions not specified
• Schneider Electric Modicon m340 BMXP342030: affected versions not specified
• Schneider Electric Modicon m340 BMXP3420302: affected versions not specified
• Schneider Electric Modicon m340 BMXP3420302H: affected versions not specified

Published 2015-12-21. Last modified 2026-06-17.