CVE-2020-7542
mediumpriority · track · 30EPSS 0.013 · 71 %ileEUUSEPSS · scored 2026-10-27
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions), that could cause denial of service when a specially crafted Read Physical Memory request over Modbus is sent to the controller.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5–7.5
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (21)
Products and version ranges known to be affected.
- n/a Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions)≤ Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions)enisa_euvdEU
- schneider-electric 140cpu65150 firmwareall versionsnvdUScpe:2.3:o:schneider-electric:140cpu65150_firmware:*:*:*:*:*:*:*:*
- schneider-electric modicon m340 bmxp341000 firmware< 3.30nvdUScpe:2.3:o:schneider-electric:modicon_m340_bmxp341000_firmware:*:*:*:*:*:*:*:*
- schneider-electric modicon m340 bmxp342000 firmware< 3.30nvdUScpe:2.3:o:schneider-electric:modicon_m340_bmxp342000_firmware:*:*:*:*:*:*:*:*
- schneider-electric modicon m340 bmxp3420102 firmware< 3.30nvdUScpe:2.3:o:schneider-electric:modicon_m340_bmxp3420102_firmware:*:*:*:*:*:*:*:*
- schneider-electric modicon m340 bmxp3420102cl firmware< 3.30nvdUScpe:2.3:o:schneider-electric:modicon_m340_bmxp3420102cl_firmware:*:*:*:*:*:*:*:*
- schneider-electric modicon m340 bmxp342020 firmware< 3.30nvdUScpe:2.3:o:schneider-electric:modicon_m340_bmxp342020_firmware:*:*:*:*:*:*:*:*
- schneider-electric modicon m340 bmxp3420302 firmware< 3.30nvdUScpe:2.3:o:schneider-electric:modicon_m340_bmxp3420302_firmware:*:*:*:*:*:*:*:*
- schneider-electric modicon m340 bmxp3420302cl firmware< 3.30nvdUScpe:2.3:o:schneider-electric:modicon_m340_bmxp3420302cl_firmware:*:*:*:*:*:*:*:*
- schneider-electric modicon m580 bmep581020 firmware< 3.20nvdUScpe:2.3:o:schneider-electric:modicon_m580_bmep581020_firmware:*:*:*:*:*:*:*:*
- schneider-electric modicon m580 bmep582020 firmware< 3.20nvdUScpe:2.3:o:schneider-electric:modicon_m580_bmep582020_firmware:*:*:*:*:*:*:*:*
- schneider-electric modicon m580 bmep582040 firmware< 3.20nvdUScpe:2.3:o:schneider-electric:modicon_m580_bmep582040_firmware:*:*:*:*:*:*:*:*
- schneider-electric modicon m580 bmep583020 firmware< 3.20nvdUScpe:2.3:o:schneider-electric:modicon_m580_bmep583020_firmware:*:*:*:*:*:*:*:*
- schneider-electric modicon m580 bmep583040 firmware< 3.20nvdUScpe:2.3:o:schneider-electric:modicon_m580_bmep583040_firmware:*:*:*:*:*:*:*:*
- schneider-electric modicon m580 bmep584020 firmware< 3.20nvdUScpe:2.3:o:schneider-electric:modicon_m580_bmep584020_firmware:*:*:*:*:*:*:*:*
- schneider-electric modicon m580 bmep584040 firmware< 3.20nvdUScpe:2.3:o:schneider-electric:modicon_m580_bmep584040_firmware:*:*:*:*:*:*:*:*
- schneider-electric modicon m580 bmep585040 firmware< 3.20nvdUScpe:2.3:o:schneider-electric:modicon_m580_bmep585040_firmware:*:*:*:*:*:*:*:*
- schneider-electric modicon m580 bmep586040 firmware< 3.20nvdUScpe:2.3:o:schneider-electric:modicon_m580_bmep586040_firmware:*:*:*:*:*:*:*:*
- schneider-electric tsxp574634 firmwareall versionsnvdUScpe:2.3:o:schneider-electric:tsxp574634_firmware:*:*:*:*:*:*:*:*
- schneider-electric tsxp575634 firmwareall versionsnvdUScpe:2.3:o:schneider-electric:tsxp575634_firmware:*:*:*:*:*:*:*:*
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (4)
External citations — patches, advisories, analysis.
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan