schneider-electric modicon m340 bmxp342020 firmware

Name: schneider-electric modicon m340 bmxp342020 firmware
Brand: schneider-electric

productUS

cpe:2.3:o:schneider-electric:modicon_m340_bmxp342020_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

9critical18high5medium0low

updated 2026-10-28

vulnerabilities (32)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2014-0754US	high10.0	9.51% (95th)	—	no fix	2014-10-03	—
CVE-2017-6017US	high7.5	4.81% (92nd)	—	no fix	2017-06-30	= 2.8
CVE-2018-7241US	critical9.8OT elevated	3.70% (90th)	—	no fix	2018-04-18	—
CVE-2020-7540US	critical9.8OT elevated	2.32% (83rd)	—	3.30	2020-12-11	< 3.30
CVE-2013-2763US	medium5.0	2.13% (82nd)	—	no fix	2013-04-04	—
CVE-2018-7761US	critical9.8	2.10% (82nd)	—	no fix	2018-04-18	—
CVE-2018-7242US	critical9.8OT elevated	1.88% (79th)	—	no fix	2018-04-18	—
CVE-2020-7535US	high7.5	1.49% (74th)	—	3.30	2020-12-11	< 3.30
CVE-2018-7760US	critical9.8	1.47% (74th)	—	no fix	2018-04-18	—
CVE-2022-45789US	critical9.8OT elevated	1.46% (73rd)	—	no fix	2023-01-31	—
CVE-2020-7537US	high7.5	1.40% (72nd)	—	3.30	2020-12-11	< 3.30
CVE-2020-7543US	high7.5	1.34% (71st)	—	3.30	2020-12-11	< 3.30
CVE-2020-7542US	high7.5	1.34% (71st)	—	3.30	2020-12-11	< 3.30
CVE-2018-7762US	high7.5	1.29% (70th)	—	no fix	2018-04-18	—
CVE-2018-7759US	high7.5	1.29% (70th)	—	no fix	2018-04-18	—
CVE-2020-7539US	high7.5	1.20% (68th)	—	3.30	2020-12-11	< 3.30
CVE-2022-45788US	critical9.8	1.17% (67th)	—	no fix	2023-01-30	—
CVE-2020-7536US	high7.5	1.17% (67th)	—	3.30	2020-12-11	< 3.30
CVE-2020-7549US	medium5.3	1.10% (65th)	—	3.30	2020-12-11	< 3.30
CVE-2021-22788US	high7.5	1.07% (65th)	—	3.40	2022-02-11	< 3.40
CVE-2021-22787US	high7.5	1.07% (65th)	—	3.40	2022-02-11	< 3.40
CVE-2021-22779US	critical9.1	1.05% (64th)	—	no fix	2021-07-14	—
CVE-2021-22785US	high7.5	0.99% (62nd)	—	3.40	2022-02-11	< 3.40
CVE-2019-6855US	high7.3OT elevated	0.95% (61st)	—	3.20	2020-01-06	< 3.20
CVE-2020-7541US	medium5.3	0.91% (60th)	—	3.30	2020-12-11	< 3.30
CVE-2015-6461US	medium5.4	0.87% (59th)	—	no fix	2019-03-21	—
CVE-2022-37300US	critical9.8	0.77% (55th)	—	3.50	2022-09-12	< 3.50
CVE-2021-22786US	high7.5	0.63% (50th)	—	3.40	2023-02-01	< 3.40
CVE-2022-0222US	high7.5	0.61% (49th)	—	3.50	2022-11-22	< 3.50
CVE-2015-6462US	medium5.4	0.56% (46th)	—	no fix	2019-03-21	—
CVE-2020-7534US	high8.8	0.36% (29th)	—	no fix	2022-02-04	—
CVE-2023-6408US	high8.1	0.32% (24th)	—	3.60	2024-02-14	< 3.60

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-754Improper Check for Unusual or Exceptional Conditions7 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-285Improper Authorization1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE32 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan