Design/Logic Flaw

2013-04-0411:58:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.1%

JSON

The Schneider Electric M340 BMXNOE01xx and BMXP3420xx PLC modules allow remote authenticated users to cause a denial of service (module crash) via crafted FTP traffic, as demonstrated by the FileZilla FTP client.

CPENameOperatorVersion
modicon_m340eq1.0.0-xx-bmxnoe
modicon_m340eq3420.0.0-xx-bmxp

CPE	Name	Operator	Version
	modicon_m340	eq	1.0.0-xx-bmxnoe
	modicon_m340	eq	3420.0.0-xx-bmxp

References

www.schneider-electric.com/download/ww/en/details/35081317-Vulnerability-Disclosure-for-Quantum-Premium-and-M340/

www.schneider-electric.com/download/ww/en/file/36555639-SEVD-2013-023-01.pdf/?fileName=SEVD-2013-023-01.pdf&reference=SEVD-2013-023-01&docType=Technical-paper