CVE-2020-7533: Schneider Electric 140cpu65260 Firmware

Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days.

CWE-287: Improper Authentication vulnerability exists which could cause the execution of commands on the webserver without authentication when sending specially crafted HTTP requests.

Affected products

• Schneider Electric 140cpu65260 Firmware: before 6.1 (fixed in 6.1)
• Schneider Electric 140noc77101 Firmware: before 1.08 (fixed in 1.08)
• Schneider Electric 140noc78000 Firmware: before 1.74 (fixed in 1.74)
• Schneider Electric 140noe77111 Firmware: before 7.1 (fixed in 7.1)
• Schneider Electric BMXNOC0401 Firmware: before 2.10 (fixed in 2.10)
• Schneider Electric BMXNOE0100 Firmware: before 3.3 (fixed in 3.3)
• Schneider Electric BMXNOE0110 Firmware: before 6.5 (fixed in 6.5)
• Schneider Electric Modicon m340 BMXP341000 Firmware: before 3.20 (fixed in 3.20)
• Schneider Electric Modicon m340 BMXP342000 Firmware: before 3.20 (fixed in 3.20)
• Schneider Electric Modicon m340 BMXP3420102 Firmware: before 3.20 (fixed in 3.20)
• Schneider Electric Modicon m340 BMXP3420302 Firmware: before 3.20 (fixed in 3.20)
• Schneider Electric TSXETY4103 Firmware: before 6.2 (fixed in 6.2)
• Schneider Electric TSXETY5103 Firmware: before 6.4 (fixed in 6.4)
• Schneider Electric TSXP574634 Firmware: before 6.1 (fixed in 6.1)
• Schneider Electric TSXP575634 Firmware: before 6.1 (fixed in 6.1)
• Schneider Electric TSXP576634 Firmware: before 6.1 (fixed in 6.1)

Published 2020-12-01. Last modified 2026-06-17.