CVE-2020-7535

🗓️ 11 Dec 2020 00:51:37Reported by schneiderType

Improper Pathname Limitation in Modicon M340 Web Serve

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers such as Modicon M340, Modicon Quantum, and Modicon Premium arises from incorrect restrictions on path names in the restricted access catalog. This allows unauthorized access by intruders to protected information.	25 Aug 202100:00	–	bdu_fstec
Circl	CVE-2020-7535	11 Dec 202007:35	–	circl
CNNVD	Schneider Electric Modicon M340 Path Traversal Vulnerability	11 Dec 202000:00	–	cnnvd
Cvelist	CVE-2020-7535	11 Dec 202000:51	–	cvelist
NCSC	Vulnerabilities fixed in Schneider Electric products	14 May 202100:00	–	ncsc
NVD	CVE-2020-7535	11 Dec 202001:15	–	nvd
OSV	CVE-2020-7535	11 Dec 202001:15	–	osv
Prion	Path traversal	11 Dec 202001:15	–	prion
Positive Technologies	PT-2020-6330 · Schneider Electric · Modicon M340 +2	8 Dec 202000:00	–	ptsecurity
RedhatCVE	CVE-2020-7535	22 May 202516:48	–	redhatcve

NVD

Node

schneider-electric modicon_m340_bmxp341000_firmwareRange<3.30

AND

schneider-electric modicon_m340_bmxp341000Match-

Node

schneider-electric modicon_m340_bmxp342000_firmwareRange<3.30

AND

schneider-electric modicon_m340_bmxp342000Match-

Node

schneider-electric modicon_m340_bmxp3420102_firmwareRange<3.30

AND

schneider-electric modicon_m340_bmxp3420102Match-

Node

schneider-electric modicon_m340_bmxp3420102cl_firmwareRange<3.30

AND

schneider-electric modicon_m340_bmxp3420102clMatch-

Node

schneider-electric modicon_m340_bmxp342020_firmwareRange<3.30

AND

schneider-electric modicon_m340_bmxp342020Match-

Node

schneider-electric modicon_m340_bmxp3420302_firmwareRange<3.30

AND

schneider-electric modicon_m340_bmxp3420302Match-

Node

schneider-electric modicon_m340_bmxp3420302cl_firmwareRange<3.30

AND

schneider-electric modicon_m340_bmxp3420302clMatch-

Node

schneider-electric bmxnoe0100_firmwareRange<3.4

AND

schneider-electric bmxnoe0100Match-

Node

schneider-electric bmxnoe0110_firmwareRange<6.6

AND

schneider-electric bmxnoe0110Match-

Node

schneider-electric 140noe77101_firmwareRange<7.3

AND

schneider-electric 140noe77101Match-

Node

schneider-electric 140noe77111_firmwareRange<7.3

AND

schneider-electric 140noe77111Match-

Node

schneider-electric 140cpu65150_firmware

AND

schneider-electric 140cpu65150Match-

Node

schneider-electric 140cpu65160_firmware

AND

schneider-electric 140cpu65160Match-

Node

schneider-electric 140noc78000_firmware

AND

schneider-electric 140noc78000Match-

Node

schneider-electric 140noc78100_firmware

AND

schneider-electric 140noc78100Match-

Node

schneider-electric 140noc77101_firmware

AND

schneider-electric 140noc77101Match-

Node

schneider-electric tsxp574634_firmware

AND

schneider-electric tsxp574634Match-

Node

schneider-electric tsxp575634_firmware

AND

schneider-electric tsxp575634Match-

Node

schneider-electric tsxp576634_firmware

AND

schneider-electric tsxp576634Match-

Node

schneider-electric tsxety4103_firmware

AND

schneider-electric tsxety4103Match-

Node

schneider-electric tsxety5103_firmware

AND

schneider-electric tsxety5103Match-

[
  {
    "product": "Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions)"
      }
    ]
  }
]

Source	Link
se	www.se.com/ww/en/download/document/SEVD-2020-343-05/

17 Jun 2026 03:24Current

7.2High risk

Vulners AI Score7.2

CVSS 25

CVSS 3.17.5

EPSS0.01425

CWE-22