CVE-2021-22787: Schneider Electric 140cpu65150 Firmware

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

A CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of the device when an attacker sends a specially crafted HTTP request to the web server of the device. Affected Product: Modicon M340 CPUs: BMXP34 (Versions prior to V3.40), Modicon M340 X80 Ethernet Communication Modules: BMXNOE0100 (H), BMXNOE0110 (H), BMXNOC0401, BMXNOR0200H RTU (All Versions), Modicon Premium Processors with integrated Ethernet (Copro): TSXP574634, TSXP575634, TSXP576634 (All Versions), Modicon Quantum Processors with Integrated Ethernet (Copro): 140CPU65xxxxx (All Versions), Modicon Quantum Communication Modules: 140NOE771x1, 140NOC78x00, 140NOC77101 (All Versions), Modicon Premium Communication Modules: TSXETY4103, TSXETY5103 (All Versions)

Affected products

• Schneider Electric 140cpu65150 Firmware: any version
• Schneider Electric 140noc77101 Firmware: any version
• Schneider Electric 140noc78x00 Firmware: any version
• Schneider Electric 140noe771x1 Firmware: any version
• Schneider Electric BMXNOC0401 Firmware: any version
• Schneider Electric BMXNOE0100 Firmware: any version
• Schneider Electric BMXNOE0110 Firmware: any version
• Schneider Electric BMXNOR0200H Rtu Firmware: any version
• Schneider Electric Modicon m340 BMXP342020 Firmware: before 3.40 (fixed in 3.40)
• Schneider Electric TSXETY4103 Firmware: any version
• Schneider Electric TSXETY5103 Firmware: any version
• Schneider Electric TSXP574634 Firmware: any version
• Schneider Electric TSXP575634 Firmware: any version
• Schneider Electric TSXP576634 Firmware: any version

Published 2022-02-11. Last modified 2026-06-17.