CVE-2020-7537

🗓️ 11 Dec 2020 00:51:52Reported by schneiderType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 80 Views

Improper Check for Unusual Conditions vulnerability in Modicon M580, M340, Quantum & Premium controllers (CVE-2020-7537

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers such as Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium lies in insufficient testing for unusual or exceptional states. This allows a intruder to trigger malfunctions during maintenance.	2 Sep 202100:00	–	bdu_fstec
Circl	CVE-2020-7537	11 Dec 202007:35	–	circl
CNNVD	Multiple Schneider Electric Products Code Issue Vulnerabilities	10 Dec 202000:00	–	cnnvd
Cvelist	CVE-2020-7537	11 Dec 202000:51	–	cvelist
NVD	CVE-2020-7537	11 Dec 202001:15	–	nvd
OSV	CVE-2020-7537	11 Dec 202001:15	–	osv
Prion	Design/Logic Flaw	11 Dec 202001:15	–	prion
Positive Technologies	PT-2020-6372 · Schneider Electric · Modicon M580 +3	8 Dec 202000:00	–	ptsecurity
RedhatCVE	CVE-2020-7537	9 Jan 202609:58	–	redhatcve
Tenable Nessus	Schneider Electric Modicon Improper Check for Unusual or Exceptional Conditions (CVE-2020-7537)	7 Feb 202200:00	–	nessus

NVD

Node

schneider-electric modicon_m580_bmep584040_firmwareRange<3.20

AND

schneider-electric modicon_m580_bmep584040Match-

Node

schneider-electric modicon_m580_bmep582040_firmwareRange<3.20

AND

schneider-electric modicon_m580_bmep582040Match-

Node

schneider-electric modicon_m580_bmep586040_firmwareRange<3.20

AND

schneider-electric modicon_m580_bmep586040Match-

Node

schneider-electric modicon_m580_bmep585040_firmwareRange<3.20

AND

schneider-electric modicon_m580_bmep585040Match-

Node

schneider-electric modicon_m580_bmep582020_firmwareRange<3.20

AND

schneider-electric modicon_m580_bmep582020Match-

Node

schneider-electric modicon_m580_bmep581020_firmwareRange<3.20

AND

schneider-electric modicon_m580_bmep581020Match-

Node

schneider-electric modicon_m580_bmep584020_firmwareRange<3.20

AND

schneider-electric modicon_m580_bmep584020Match-

Node

schneider-electric modicon_m580_bmep583040_firmwareRange<3.20

AND

schneider-electric modicon_m580_bmep583040Match-

Node

schneider-electric modicon_m580_bmep583020_firmwareRange<3.20

AND

schneider-electric modicon_m580_bmep583020Match-

Node

schneider-electric modicon_m340_bmxp341000_firmwareRange<3.30

AND

schneider-electric modicon_m340_bmxp341000Match-

Node

schneider-electric modicon_m340_bmxp342000_firmwareRange<3.30

AND

schneider-electric modicon_m340_bmxp342000Match-

Node

schneider-electric modicon_m340_bmxp3420102_firmwareRange<3.30

AND

schneider-electric modicon_m340_bmxp3420102Match-

Node

schneider-electric modicon_m340_bmxp3420102cl_firmwareRange<3.30

AND

schneider-electric modicon_m340_bmxp3420102clMatch-

Node

schneider-electric modicon_m340_bmxp342020_firmwareRange<3.30

AND

schneider-electric modicon_m340_bmxp342020Match-

Node

schneider-electric modicon_m340_bmxp3420302_firmwareRange<3.30

AND

schneider-electric modicon_m340_bmxp3420302Match-

Node

schneider-electric modicon_m340_bmxp3420302cl_firmwareRange<3.30

AND

schneider-electric modicon_m340_bmxp3420302clMatch-

Node

schneider-electric tsxp574634_firmware

AND

schneider-electric tsxp574634Match-

Node

schneider-electric tsxp575634_firmware

AND

schneider-electric tsxp575634Match-

Node

schneider-electric tsxp576634_firmware

AND

schneider-electric tsxp576634Match-

[
  {
    "product": "Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions)"
      }
    ]
  }
]

Source	Link
se	www.se.com/ww/en/download/document/SEVD-2020-343-08/

17 Jun 2026 03:24Current

7.4High risk

Vulners AI Score7.4

CVSS 25

CVSS 3.17.5

EPSS0.01382

CWE-754