CVE-2018-7242: Schneider Electric 140cpu31110 Firmware

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

Vulnerable hash algorithms exists in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules. The algorithm used to encrypt the password is vulnerable to hash collision attacks.

Affected products

• Schneider Electric 140cpu31110 Firmware: affected versions not specified
• Schneider Electric 140cpu31110c Firmware: affected versions not specified
• Schneider Electric 140cpu43412u Firmware: affected versions not specified
• Schneider Electric 140cpu43412uc Firmware: affected versions not specified
• Schneider Electric 140cpu65150 Firmware: affected versions not specified
• Schneider Electric 140cpu65150c Firmware: affected versions not specified
• Schneider Electric 140cpu65160 Firmware: affected versions not specified
• Schneider Electric 140cpu65160c Firmware: affected versions not specified
• Schneider Electric 140cpu65160s Firmware: affected versions not specified
• Schneider Electric 140cpu65260 Firmware: affected versions not specified
• Schneider Electric 140cpu65260c Firmware: affected versions not specified
• Schneider Electric 140cpu65860 Firmware: affected versions not specified
• Schneider Electric 140cpu65860c Firmware: affected versions not specified
• Schneider Electric BMXNOR0200 Firmware: affected versions not specified
• Schneider Electric BMXNOR0200H Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP341000 Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP341000H Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP342000 Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP3420102 Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP3420102CL Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP342020 Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP342020H Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP3420302 Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP3420302CL Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP3420302H Firmware: affected versions not specified
• and 32 more

Published 2018-04-18. Last modified 2026-06-17.