CVE-2020-7543: Schneider Electric Modicon m340 BMXP341000 Firmware

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions), that could cause denial of service when a specially crafted Read Physical Memory request over Modbus is sent to the controller.

Affected products

• Schneider Electric Modicon m340 BMXP341000 Firmware: before 3.30 (fixed in 3.30)
• Schneider Electric Modicon m340 BMXP342000 Firmware: before 3.30 (fixed in 3.30)
• Schneider Electric Modicon m340 BMXP3420102 Firmware: before 3.30 (fixed in 3.30)
• Schneider Electric Modicon m340 BMXP3420102CL Firmware: before 3.30 (fixed in 3.30)
• Schneider Electric Modicon m340 BMXP342020 Firmware: before 3.30 (fixed in 3.30)
• Schneider Electric Modicon m340 BMXP3420302 Firmware: before 3.30 (fixed in 3.30)
• Schneider Electric Modicon m340 BMXP3420302CL Firmware: before 3.30 (fixed in 3.30)
• Schneider Electric Modicon m580 BMEP581020 Firmware: before 3.20 (fixed in 3.20)
• Schneider Electric Modicon m580 BMEP582020 Firmware: before 3.20 (fixed in 3.20)
• Schneider Electric Modicon m580 BMEP582040 Firmware: before 3.20 (fixed in 3.20)
• Schneider Electric Modicon m580 BMEP583020 Firmware: before 3.20 (fixed in 3.20)
• Schneider Electric Modicon m580 BMEP583040 Firmware: before 3.20 (fixed in 3.20)
• Schneider Electric Modicon m580 BMEP584020 Firmware: before 3.20 (fixed in 3.20)
• Schneider Electric Modicon m580 BMEP584040 Firmware: before 3.20 (fixed in 3.20)
• Schneider Electric Modicon m580 BMEP585040 Firmware: before 3.20 (fixed in 3.20)
• Schneider Electric Modicon m580 BMEP586040 Firmware: before 3.20 (fixed in 3.20)

Published 2020-12-11. Last modified 2026-06-17.