CVE-2020-7536

Published: Dec 11, 2020Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A CWE-754:Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M340 CPUs (BMXP34* versions prior to V3.30) Modicon M340 Communication Ethernet modules (BMXNOE0100 (H) versions prior to V3.4 BMXNOE0110 (H) versions prior to V6.6 BMXNOR0200H all versions), that could cause the device to be unreachable when modifying network parameters over SNMP.

Affected (10)

Products: Schneider Electric: Modicon M340 Bmxp341000 Firmware, Modicon M340 Bmxp342000 Firmware, Modicon M340 Bmxp3420102 Firmware, Modicon M340 Bmxp3420102cl Firmware, Modicon M340 Bmxp342020 Firmware, Modicon M340 Bmxp3420302 Firmware, Modicon M340 Bmxp3420302cl Firmware, Bmxnoe0100 Firmware, Bmxnoe0110 Firmware, Bmxnor0200h Firmware

Schneider Electric

10 products

Modicon M340 Bmxp341000 Firmware

Modicon M340 Bmxp342000 Firmware

Modicon M340 Bmxp3420102 Firmware

Modicon M340 Bmxp3420102cl Firmware

Modicon M340 Bmxp342020 Firmware

Modicon M340 Bmxp3420302 Firmware

Modicon M340 Bmxp3420302cl Firmware

Bmxnoe0100 Firmware

Bmxnoe0110 Firmware

Bmxnor0200h Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp341000 Firmware	Before 3.30

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp341000	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp342000 Firmware	Before 3.30

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp342000	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp3420102 Firmware	Before 3.30

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp3420102	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp3420102cl Firmware	Before 3.30

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp3420102cl	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp342020 Firmware	Before 3.30

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp342020	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp3420302 Firmware	Before 3.30

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp3420302	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp3420302cl Firmware	Before 3.30

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp3420302cl	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Bmxnoe0100 Firmware	Before 3.4

Running on/with	Platform Versions
Schneider Electric Bmxnoe0100	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Bmxnoe0110 Firmware	Before 6.6

Running on/with	Platform Versions
Schneider Electric Bmxnoe0110	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Bmxnor0200h Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Bmxnor0200h	All versions

Related CWEs

CWE-754

Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

References (4)

https://security.cse.iitk.ac.in/responsible-disclosure

Source: cybersecurity@se.com

Vendor Advisory

https://www.se.com/ww/en/download/document/SEVD-2020-343-07/

Source: cybersecurity@se.com

Vendor Advisory

https://security.cse.iitk.ac.in/responsible-disclosure

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.se.com/ww/en/download/document/SEVD-2020-343-07/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.