CVE-2024-12142: Schneider Electric BMXNOE0100

High severity, CVSS 8.6. EPSS: 0.3% chance of exploitation in the next 30 days.

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause information disclosure of restricted web page, modification of web page and denial of service when specific web pages are modified and restricted functions are invoked.

Affected products

• Schneider Electric BMXNOE0100: any version
• Schneider Electric BMXNOE0110: any version
• Schneider Electric BMXNOR0200H
• Schneider Electric Modicon m340 Processors Part Numbers BMXP34*: any version

Published 2025-01-17. Last modified 2026-06-17.