CVE-2017-6017: Schneider Electric BMXNOC0401 Firmware

High severity, CVSS 7.5. EPSS: 4.8% chance of exploitation in the next 30 days.

A Resource Exhaustion issue was discovered in Schneider Electric Modicon M340 PLC BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP341000, BMXP342000, BMXP3420102, BMXP3420102CL, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, and BMXP342030H. A remote attacker could send a specially crafted set of packets to the PLC causing it to freeze, requiring the operator to physically press the reset button on the PLC in order to recover.

Affected products

• Schneider Electric BMXNOC0401 Firmware: version 2.8 only
• Schneider Electric BMXNOE0100 Firmware: version 2.8 only
• Schneider Electric BMXNOE0110 Firmware: version 2.8 only
• Schneider Electric BMXNOE0110H Firmware: version 2.8 only
• Schneider Electric BMXNOR0200H Firmware: version 2.8 only
• Schneider Electric Modicon m340 BMXP341000 Firmware: version 2.8 only
• Schneider Electric Modicon m340 BMXP342000 Firmware: version 2.8 only
• Schneider Electric Modicon m340 BMXP3420102 Firmware: version 2.8 only
• Schneider Electric Modicon m340 BMXP3420102CL Firmware: version 2.8 only
• Schneider Electric Modicon m340 BMXP342020 Firmware: version 2.8 only
• Schneider Electric Modicon m340 BMXP342020H Firmware: version 2.8 only
• Schneider Electric Modicon m340 BMXP3420302 Firmware: version 2.8 only
• Schneider Electric Modicon m340 BMXP3420302H Firmware: version 2.8 only
• Schneider Electric Modicon m340 BMXP342030 Firmware: version 2.8 only
• Schneider Electric Modicon m340 BMXP342030H Firmware: version 2.8 only

Published 2017-06-30. Last modified 2026-06-17.