CVE-2018-7804: Schneider Electric Modicom BMXNOR0200H Firmware

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

A URL Redirection to Untrusted Site vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where a user clicking on a specially crafted link can be redirected to a URL of the attacker's choosing.

Affected products

• Schneider Electric Modicom BMXNOR0200H Firmware: any version
• Schneider Electric Modicom m340 Firmware: any version
• Schneider Electric Modicom Premium Firmware: any version
• Schneider Electric Modicom Quantum Firmware: any version

Published 2018-12-17. Last modified 2026-06-17.