CVE-2021-22786: Schneider Electric Modicon m340 BMXP341000 Firmware

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

A CWE-200: Information Exposure vulnerability exists that could cause the exposure of sensitive information stored on the memory of the controller when communicating over the Modbus TCP protocol. Affected Products: Modicon M340 CPU (part numbers BMXP34*) (Versions prior to V3.30), Modicon M580 CPU (part numbers BMEP* and BMEH*) (Versions prior to SV3.20), Modicon MC80 (BMKC80) (Versions prior to V1.6), Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) (All Versions), Modicon Momentum MDI (171CBU*) (Versions prior to V2.3), Legacy Modicon Quantum (All Versions)

Affected products

• Schneider Electric Modicon m340 BMXP341000 Firmware: before 3.40 (fixed in 3.40)
• Schneider Electric Modicon m340 BMXP342000 Firmware: before 3.40 (fixed in 3.40)
• Schneider Electric Modicon m340 BMXP3420102 Firmware: before 3.40 (fixed in 3.40)
• Schneider Electric Modicon m340 BMXP342010 Firmware: before 3.40 (fixed in 3.40)
• Schneider Electric Modicon m340 BMXP342020 Firmware: before 3.40 (fixed in 3.40)
• Schneider Electric Modicon m340 BMXP342020H Firmware: before 3.40 (fixed in 3.40)
• Schneider Electric Modicon m340 BMXP3420302 Firmware: before 3.40 (fixed in 3.40)
• Schneider Electric Modicon m340 BMXP3420302H Firmware: before 3.40 (fixed in 3.40)
• Schneider Electric Modicon m340 BMXP342030 Firmware: before 3.40 (fixed in 3.40)
• Schneider Electric Modicon m340 BMXP342030H Firmware: before 3.40 (fixed in 3.40)
• Schneider Electric Modicon m580 BMEH582040 Firmware: up to and including 3.20
• Schneider Electric Modicon m580 BMEH582040C Firmware: up to and including 3.20
• Schneider Electric Modicon m580 BMEH582040S Firmware: up to and including 3.20
• Schneider Electric Modicon m580 BMEH584040 Firmware: up to and including 3.20
• Schneider Electric Modicon m580 BMEH584040C Firmware: up to and including 3.20
• Schneider Electric Modicon m580 BMEH584040S Firmware: up to and including 3.20
• Schneider Electric Modicon m580 BMEH586040 Firmware: up to and including 3.20
• Schneider Electric Modicon m580 BMEH586040C Firmware: up to and including 3.20
• Schneider Electric Modicon m580 BMEH586040S Firmware: up to and including 3.20
• Schneider Electric Modicon m580 BMEP581020 Firmware: up to and including 3.20
• Schneider Electric Modicon m580 BMEP581020H Firmware: up to and including 3.20
• Schneider Electric Modicon m580 BMEP582020 Firmware: up to and including 3.20
• Schneider Electric Modicon m580 BMEP582020H Firmware: up to and including 3.20
• Schneider Electric Modicon m580 BMEP582040 Firmware: up to and including 3.20
• Schneider Electric Modicon m580 BMEP582040H Firmware: up to and including 3.20
• and 16 more

Published 2023-02-01. Last modified 2026-06-17.