CVE-2018-7759: Schneider Electric 140cpu31110 Firmware

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

A buffer overflow vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. The buffer overflow vulnerability is caused by the length of the source string specified (instead of the buffer size) as the number of bytes to be copied.

Affected products

• Schneider Electric 140cpu31110 Firmware: affected versions not specified
• Schneider Electric 140cpu31110c Firmware: affected versions not specified
• Schneider Electric 140cpu43412u Firmware: affected versions not specified
• Schneider Electric 140cpu43412uc Firmware: affected versions not specified
• Schneider Electric 140cpu65150 Firmware: affected versions not specified
• Schneider Electric 140cpu65150c Firmware: affected versions not specified
• Schneider Electric 140cpu65160 Firmware: affected versions not specified
• Schneider Electric 140cpu65160c Firmware: affected versions not specified
• Schneider Electric 140cpu65160s Firmware: affected versions not specified
• Schneider Electric 140cpu65260 Firmware: affected versions not specified
• Schneider Electric 140cpu65260c Firmware: affected versions not specified
• Schneider Electric 140cpu65860 Firmware: affected versions not specified
• Schneider Electric 140cpu65860c Firmware: affected versions not specified
• Schneider Electric BMXNOR0200 Firmware: affected versions not specified
• Schneider Electric BMXNOR0200H Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP341000 Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP341000H Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP342000 Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP3420102 Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP3420102CL Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP342020 Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP342020H Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP3420302 Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP3420302CL Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP3420302H Firmware: affected versions not specified
• and 32 more

Published 2018-04-18. Last modified 2026-06-17.