Schneider Electric Modicon m340 BMXNOE0100 Firmware vulnerabilities

2 CVEs affecting Schneider Electric Modicon m340 BMXNOE0100 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-0222, published 2022-11-22.

More from Schneider Electric.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2014-0754, published 2014-10-03. High severity, CVSS 10.0. EPSS: 9.5% chance of exploitation in the next 30 days. Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 140NOC78x Exec before 1.62, 140NOE77x Exec before 6.2, BMXNOC0401…
• CVE-2022-0222, published 2022-11-22. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A CWE-269: Improper Privilege Management vulnerability exists that could cause a denial of service of the Ethernet communication of the controller when sending a specific request over SNMP. Affected…