CVE-2013-2763

Published: Apr 4, 2013Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The Schneider Electric M340 PLC modules allow remote attackers to cause a denial of service (resource consumption) via unspecified vectors. NOTE: the vendor reportedly disputes this issue because it "could not be duplicated" and "an attacker could not remotely exploit this observed behavior to deny PLC control functions.

Affected (12)

Products: Schneider Electric: Modicon M340 Bmx Noc 0401 Firmware, Modicon M340 Bmx Noe 0100 Firmware, Modicon M340 Bmx Noe 0100h Firmware, Modicon M340 Bmx Noe 0110 Firmware, Modicon M340 Bmx Noe 0110h Firmware, Modicon M340 Bmx Nor 0200h Firmware, Modicon M340 Bmx P34 2010 Firmware, Modicon M340 Bmx P34 2030 Firmware, Modicon M340 Bmxp341000 Firmware, Modicon M340 Bmxp342010 Firmware, Modicon M340 Bmxp342020 Firmware, Modicon M340 Bmxp342030 Firmware

Schneider Electric

12 products

Modicon M340 Bmx Noc 0401 Firmware

Modicon M340 Bmx Noe 0100 Firmware

Modicon M340 Bmx Noe 0100h Firmware

Modicon M340 Bmx Noe 0110 Firmware

Modicon M340 Bmx Noe 0110h Firmware

Modicon M340 Bmx Nor 0200h Firmware

Modicon M340 Bmx P34 2010 Firmware

Modicon M340 Bmx P34 2030 Firmware

Modicon M340 Bmxp341000 Firmware

Modicon M340 Bmxp342010 Firmware

Modicon M340 Bmxp342020 Firmware

Modicon M340 Bmxp342030 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmx Noc 0401 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmx Noc 0401	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmx Noe 0100 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmx Noe 0100	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmx Noe 0100h Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmx Noe 0100h	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmx Noe 0110 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmx Noe 0110	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmx Noe 0110h Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmx Noe 0110h	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmx Nor 0200h Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmx Nor 0200h	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmx P34 2010 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmx P34 2010	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmx P34 2030 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmx P34 2030	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp341000 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp341000	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp342010 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp342010	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp342020 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp342020	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp342030 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp342030	All versions

Related CWEs

CWE-400

Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References (2)

http://ics-cert.us-cert.gov/pdf/ICSA-13-077-01A.pdf

Source: cve@mitre.org

Broken LinkThird Party AdvisoryUS Government Resource

http://ics-cert.us-cert.gov/pdf/ICSA-13-077-01A.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party AdvisoryUS Government Resource

Timeline

No history available yet.