CVE-2018-7761: Schneider Electric 140cpu31110 Firmware

Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days.

A vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow arbitrary code execution.

Affected products

• Schneider Electric 140cpu31110 Firmware: affected versions not specified
• Schneider Electric 140cpu31110c Firmware: affected versions not specified
• Schneider Electric 140cpu43412u Firmware: affected versions not specified
• Schneider Electric 140cpu43412uc Firmware: affected versions not specified
• Schneider Electric 140cpu65150 Firmware: affected versions not specified
• Schneider Electric 140cpu65150c Firmware: affected versions not specified
• Schneider Electric 140cpu65160 Firmware: affected versions not specified
• Schneider Electric 140cpu65160c Firmware: affected versions not specified
• Schneider Electric 140cpu65160s Firmware: affected versions not specified
• Schneider Electric 140cpu65260 Firmware: affected versions not specified
• Schneider Electric 140cpu65260c Firmware: affected versions not specified
• Schneider Electric 140cpu65860 Firmware: affected versions not specified
• Schneider Electric 140cpu65860c Firmware: affected versions not specified
• Schneider Electric BMXNOR0200 Firmware: affected versions not specified
• Schneider Electric BMXNOR0200H Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP341000 Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP341000H Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP342000 Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP3420102 Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP3420102CL Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP342020 Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP342020H Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP3420302 Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP3420302CL Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP3420302H Firmware: affected versions not specified
• and 32 more

Published 2018-04-18. Last modified 2026-06-17.