CVE-2024-5056: Schneider Electric BMXNOE0100 Firmware

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

CWE-552: Files or Directories Accessible to External Parties vulnerability exists which may prevent user to update the device firmware and prevent proper behavior of the webserver when specific files or directories are removed from the filesystem.

Affected products

• Schneider Electric BMXNOE0100 Firmware: any version
• Schneider Electric BMXNOE0110 Firmware: any version
• Schneider Electric Modicon m340 Firmware: any version

Published 2024-06-12. Last modified 2026-06-17.