CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-7534

A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists on the web server used, that could cause a leak of sensitive data or unauthorized actions on the web server during the time the user is logged in. Affected Products: Modicon M340 CPUs: BMXP34 (All Versions), Modicon Quantum CPUs with integrated Ethernet (Copro): 140CPU65 (All Versions), Modicon Premium CPUs with integrated Ethernet (Copro): TSXP57 (All Versions), Modicon M340 ethernet modules: (BMXNOC0401, BMXNOE01, BMXNOR0200H) (All Versions), Modicon Quantum and Premium factory cast communication modules: (140NOE77111, 140NOC78*00, TSXETY5103, TSXETY4103) (All Versions)

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 40.1%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.8

References

Products affected by CVE-2020-7534

Schneider-Electric » 140cpu65 » Version: N/A

cpe:2.3:h:schneider-electric:140cpu65:-
Schneider-Electric » 140noc78000 » Version: N/A

cpe:2.3:h:schneider-electric:140noc78000:-
Schneider-Electric » 140noe77111 » Version: N/A

cpe:2.3:h:schneider-electric:140noe77111:-
Schneider-Electric » Bmxnoc0401 » Version: N/A

cpe:2.3:h:schneider-electric:bmxnoc0401:-
Schneider-Electric » Bmxnoe01 » Version: N/A

cpe:2.3:h:schneider-electric:bmxnoe01:-
Schneider-Electric » Bmxnor0200h » Version: N/A

cpe:2.3:h:schneider-electric:bmxnor0200h:-
Schneider-Electric » Modicon M340 Bmxp342020 » Version: N/A

cpe:2.3:h:schneider-electric:modicon_m340_bmxp342020:-
Schneider-Electric » Tsxety4103 » Version: N/A

cpe:2.3:h:schneider-electric:tsxety4103:-
Schneider-Electric » Tsxety5103 » Version: N/A

cpe:2.3:h:schneider-electric:tsxety5103:-
Schneider-Electric » Tsxp57 » Version: N/A

cpe:2.3:h:schneider-electric:tsxp57:-
Schneider-Electric » 140cpu65 Firmware » Version: N/A

cpe:2.3:o:schneider-electric:140cpu65_firmware:-
Schneider-Electric » 140noc78000 Firmware » Version: N/A

cpe:2.3:o:schneider-electric:140noc78000_firmware:-
Schneider-Electric » 140noc78000 Firmware » Version: 1.6

cpe:2.3:o:schneider-electric:140noc78000_firmware:1.6
Schneider-Electric » 140noc78000 Firmware » Version: 1.61

cpe:2.3:o:schneider-electric:140noc78000_firmware:1.61
Schneider-Electric » 140noc78000 Firmware » Version: 1.62

cpe:2.3:o:schneider-electric:140noc78000_firmware:1.62
Schneider-Electric » 140noc78000 Firmware » Version: 1.63

cpe:2.3:o:schneider-electric:140noc78000_firmware:1.63
Schneider-Electric » 140noc78000 Firmware » Version: 1.65

cpe:2.3:o:schneider-electric:140noc78000_firmware:1.65
Schneider-Electric » 140noc78000 Firmware » Version: 1.67

cpe:2.3:o:schneider-electric:140noc78000_firmware:1.67
Schneider-Electric » 140noc78000 Firmware » Version: 1.68

cpe:2.3:o:schneider-electric:140noc78000_firmware:1.68
Schneider-Electric » 140noc78000 Firmware » Version: 1.69

cpe:2.3:o:schneider-electric:140noc78000_firmware:1.69
Schneider-Electric » 140noc78000 Firmware » Version: 1.70

cpe:2.3:o:schneider-electric:140noc78000_firmware:1.70
Schneider-Electric » 140noc78000 Firmware » Version: 1.71

cpe:2.3:o:schneider-electric:140noc78000_firmware:1.71
Schneider-Electric » 140noc78000 Firmware » Version: 1.72

cpe:2.3:o:schneider-electric:140noc78000_firmware:1.72
Schneider-Electric » 140noc78000 Firmware » Version: 1.73

cpe:2.3:o:schneider-electric:140noc78000_firmware:1.73
Schneider-Electric » 140noc78000 Firmware » Version: 1.74

cpe:2.3:o:schneider-electric:140noc78000_firmware:1.74
Schneider-Electric » 140noe77111 Firmware » Version: N/A

cpe:2.3:o:schneider-electric:140noe77111_firmware:-
Schneider-Electric » 140noe77111 Firmware » Version: 7.0

cpe:2.3:o:schneider-electric:140noe77111_firmware:7.0
Schneider-Electric » 140noe77111 Firmware » Version: 7.1

cpe:2.3:o:schneider-electric:140noe77111_firmware:7.1
Schneider-Electric » 140noe77111 Firmware » Version: 7.3

cpe:2.3:o:schneider-electric:140noe77111_firmware:7.3
Schneider-Electric » Bmxnoc0401 Firmware » Version: N/A

cpe:2.3:o:schneider-electric:bmxnoc0401_firmware:-
Schneider-Electric » Bmxnoc0401 Firmware » Version: 2.10

cpe:2.3:o:schneider-electric:bmxnoc0401_firmware:2.10
Schneider-Electric » Bmxnoc0401 Firmware » Version: 2.8

cpe:2.3:o:schneider-electric:bmxnoc0401_firmware:2.8
Schneider-Electric » Bmxnoe01 Firmware » Version: N/A

cpe:2.3:o:schneider-electric:bmxnoe01_firmware:-
Schneider-Electric » Bmxnor0200h Firmware » Version: N/A

cpe:2.3:o:schneider-electric:bmxnor0200h_firmware:-
Schneider-Electric » Bmxnor0200h Firmware » Version: 2.8

cpe:2.3:o:schneider-electric:bmxnor0200h_firmware:2.8
Schneider-Electric » Modicon M340 Bmxp342020 Firmware » Version: N/A

cpe:2.3:o:schneider-electric:modicon_m340_bmxp342020_firmware:-
Schneider-Electric » Modicon M340 Bmxp342020 Firmware » Version: 2.8

cpe:2.3:o:schneider-electric:modicon_m340_bmxp342020_firmware:2.8
Schneider-Electric » Modicon M340 Bmxp342020 Firmware » Version: 3.30

cpe:2.3:o:schneider-electric:modicon_m340_bmxp342020_firmware:3.30
Schneider-Electric » Modicon M340 Bmxp342020 Firmware » Version: 3.40

cpe:2.3:o:schneider-electric:modicon_m340_bmxp342020_firmware:3.40
Schneider-Electric » Modicon M340 Bmxp342020 Firmware » Version: 3.50

cpe:2.3:o:schneider-electric:modicon_m340_bmxp342020_firmware:3.50
Schneider-Electric » Modicon M340 Bmxp342020 Firmware » Version: 3.60

cpe:2.3:o:schneider-electric:modicon_m340_bmxp342020_firmware:3.60
Schneider-Electric » Tsxety4103 Firmware » Version: N/A

cpe:2.3:o:schneider-electric:tsxety4103_firmware:-
Schneider-Electric » Tsxety4103 Firmware » Version: 6.2

cpe:2.3:o:schneider-electric:tsxety4103_firmware:6.2
Schneider-Electric » Tsxety5103 Firmware » Version: N/A

cpe:2.3:o:schneider-electric:tsxety5103_firmware:-
Schneider-Electric » Tsxety5103 Firmware » Version: 6.4

cpe:2.3:o:schneider-electric:tsxety5103_firmware:6.4
Schneider-Electric » Tsxp57 Firmware » Version: N/A

cpe:2.3:o:schneider-electric:tsxp57_firmware:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-7534

Products

Pricing

Contact Us