CVE-2020-7536

🗓️ 11 Dec 2020 00:46:18Reported by schneiderType

Modicon M340 CPUs and Ethernet modules vulnerability (CVE-2020-7536

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2020-7536	11 Dec 202007:35	–	circl
CNNVD	Schneider Electric Modicon M340 Code Issue Vulnerability	10 Dec 202000:00	–	cnnvd
Cvelist	CVE-2020-7536	11 Dec 202000:46	–	cvelist
NCSC	Vulnerabilities fixed in Schneider Electric equipment	11 Feb 202100:00	–	ncsc
NVD	CVE-2020-7536	11 Dec 202001:15	–	nvd
Prion	Design/Logic Flaw	11 Dec 202001:15	–	prion
Positive Technologies	PT-2020-6373 · Schneider Electric · Modicon M340 +3	8 Oct 202000:00	–	ptsecurity
RedhatCVE	CVE-2020-7536	9 Jan 202609:59	–	redhatcve
Tenable Nessus	Schneider Electric Modicon Improper Check for Unusual or Exceptional Conditions (CVE-2020-7536)	29 Jun 202300:00	–	nessus

NVD

Node

schneider-electric modicon_m340_bmxp341000_firmwareRange<3.30

AND

schneider-electric modicon_m340_bmxp341000Match-

Node

schneider-electric modicon_m340_bmxp342000_firmwareRange<3.30

AND

schneider-electric modicon_m340_bmxp342000Match-

Node

schneider-electric modicon_m340_bmxp3420102_firmwareRange<3.30

AND

schneider-electric modicon_m340_bmxp3420102Match-

Node

schneider-electric modicon_m340_bmxp3420102cl_firmwareRange<3.30

AND

schneider-electric modicon_m340_bmxp3420102clMatch-

Node

schneider-electric modicon_m340_bmxp342020_firmwareRange<3.30

AND

schneider-electric modicon_m340_bmxp342020Match-

Node

schneider-electric modicon_m340_bmxp3420302_firmwareRange<3.30

AND

schneider-electric modicon_m340_bmxp3420302Match-

Node

schneider-electric modicon_m340_bmxp3420302cl_firmwareRange<3.30

AND

schneider-electric modicon_m340_bmxp3420302clMatch-

Node

schneider-electric bmxnoe0100_firmwareRange<3.4

AND

schneider-electric bmxnoe0100Match-

Node

schneider-electric bmxnoe0110_firmwareRange<6.6

AND

schneider-electric bmxnoe0110Match-

Node

schneider-electric bmxnor0200h_firmware

AND

schneider-electric bmxnor0200hMatch-

[
  {
    "product": "Modicon M340 CPUs (BMXP34* versions prior to V3.30) and Modicon M340 Communication Ethernet modules (BMXNOE0100 (H) versions prior to V3.4,  BMXNOE0110 (H) versions prior to V6.6, and BMXNOR0200H all versions)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Modicon M340 CPUs (BMXP34* versions prior to V3.30) and Modicon M340 Communication Ethernet modules (BMXNOE0100 (H) versions prior to V3.4,  BMXNOE0110 (H) versions prior to V6.6, and BMXNOR0200H all versions)"
      }
    ]
  }
]

Source	Link
se	www.se.com/ww/en/download/document/SEVD-2020-343-07/
security	www.security.cse.iitk.ac.in/responsible-disclosure

21 Nov 2024 05:37Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.5

CVSS 27.8

EPSS0.0048

CWE-754