CVE-2022-0222: Schneider Electric Modicon m340 BMXNOE0100 Firmware

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

A CWE-269: Improper Privilege Management vulnerability exists that could cause a denial of service of the Ethernet communication of the controller when sending a specific request over SNMP. Affected products: Modicon M340 CPUs(BMXP34* versions prior to V3.40), Modicon M340 X80 Ethernet Communication modules:BMXNOE0100 (H), BMXNOE0110 (H), BMXNOR0200H RTU(BMXNOE* all versions)(BMXNOR* versions prior to v1.7 IR24)

Affected products

• Schneider Electric Modicon m340 BMXNOE0100 Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXNOE0110 Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXNOE0110H Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXNOR0200H Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP341000 Firmware: before 3.50 (fixed in 3.50)
• Schneider Electric Modicon m340 BMXP342000 Firmware: before 3.50 (fixed in 3.50)
• Schneider Electric Modicon m340 BMXP3420102 Firmware: before 3.50 (fixed in 3.50)
• Schneider Electric Modicon m340 BMXP342010 Firmware: before 3.50 (fixed in 3.50)
• Schneider Electric Modicon m340 BMXP342020 Firmware: before 3.50 (fixed in 3.50)
• Schneider Electric Modicon m340 BMXP342020H Firmware: before 3.50 (fixed in 3.50)
• Schneider Electric Modicon m340 BMXP3420302 Firmware: before 3.50 (fixed in 3.50)
• Schneider Electric Modicon m340 BMXP3420302H Firmware: before 3.50 (fixed in 3.50)
• Schneider Electric Modicon m340 BMXP342030 Firmware: before 3.50 (fixed in 3.50)
• Schneider Electric Modicon m340 BMXP342030H Firmware: before 3.50 (fixed in 3.50)

Published 2022-11-22. Last modified 2026-06-17.