Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2020-7540 Details

Description

A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause unauthenticated command execution in the controller when sending special HTTP requests.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:9.8 CRITICALVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://www.se.com/ww/en/download/document/SEVD-2020-343-04/	CVE	Vendor Advisory
https://www.se.com/ww/en/download/document/SEVD-2020-343-04/	[email protected]	Vendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-306	Missing Authentication for Critical Function	[email protected]

Affected Products

Product	Versions
schneider-electric modicon m340 bmxp341000 firmware	< 3.30
CPE cpe:2.3:o:schneider-electric:modicon_m340_bmxp341000_firmware:::::::: Remediation No remediation found in references.
schneider-electric modicon m340 bmxp341000	All versions
CPE cpe:2.3:h:schneider-electric:modicon_m340_bmxp341000:-:::::::* Remediation No remediation found in references.
schneider-electric modicon m340 bmxp342000 firmware	< 3.30
CPE cpe:2.3:o:schneider-electric:modicon_m340_bmxp342000_firmware:::::::: Remediation No remediation found in references.
schneider-electric modicon m340 bmxp342000	All versions
CPE cpe:2.3:h:schneider-electric:modicon_m340_bmxp342000:-:::::::* Remediation No remediation found in references.
schneider-electric modicon m340 bmxp3420102 firmware	< 3.30
CPE cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420102_firmware:::::::: Remediation No remediation found in references.
schneider-electric modicon m340 bmxp3420102	All versions
CPE cpe:2.3:h:schneider-electric:modicon_m340_bmxp3420102:-:::::::* Remediation No remediation found in references.
schneider-electric modicon m340 bmxp3420102cl firmware	< 3.30
CPE cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420102cl_firmware:::::::: Remediation No remediation found in references.
schneider-electric modicon m340 bmxp3420102cl	All versions
CPE cpe:2.3:h:schneider-electric:modicon_m340_bmxp3420102cl:-:::::::* Remediation No remediation found in references.
schneider-electric modicon m340 bmxp342020 firmware	< 3.30
CPE cpe:2.3:o:schneider-electric:modicon_m340_bmxp342020_firmware:::::::: Remediation No remediation found in references.
schneider-electric modicon m340 bmxp342020	All versions
CPE cpe:2.3:h:schneider-electric:modicon_m340_bmxp342020:-:::::::* Remediation No remediation found in references.
schneider-electric modicon m340 bmxp3420302 firmware	< 3.30
CPE cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420302_firmware:::::::: Remediation No remediation found in references.
schneider-electric modicon m340 bmxp3420302	All versions
CPE cpe:2.3:h:schneider-electric:modicon_m340_bmxp3420302:-:::::::* Remediation No remediation found in references.
schneider-electric modicon m340 bmxp3420302cl firmware	< 3.30
CPE cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420302cl_firmware:::::::: Remediation No remediation found in references.
schneider-electric modicon m340 bmxp3420302cl	All versions
CPE cpe:2.3:h:schneider-electric:modicon_m340_bmxp3420302cl:-:::::::* Remediation No remediation found in references.
schneider-electric bmxnoe0100 firmware	< 3.3
CPE cpe:2.3:o:schneider-electric:bmxnoe0100_firmware:::::::: Remediation No remediation found in references.
schneider-electric bmxnoe0100	All versions
CPE cpe:2.3:h:schneider-electric:bmxnoe0100:-:::::::* Remediation No remediation found in references.
schneider-electric bmxnoe0110 firmware	< 6.5
CPE cpe:2.3:o:schneider-electric:bmxnoe0110_firmware:::::::: Remediation No remediation found in references.
schneider-electric bmxnoe0110	All versions
CPE cpe:2.3:h:schneider-electric:bmxnoe0110:-:::::::* Remediation No remediation found in references.
schneider-electric 140noe77101 firmware	< 7.1
CPE cpe:2.3:o:schneider-electric:140noe77101_firmware:::::::: Remediation No remediation found in references.
schneider-electric 140noe77101	All versions
CPE cpe:2.3:h:schneider-electric:140noe77101:-:::::::* Remediation No remediation found in references.
schneider-electric 140noe77111 firmware	< 7.1
CPE cpe:2.3:o:schneider-electric:140noe77111_firmware:::::::: Remediation No remediation found in references.
schneider-electric 140noe77111	All versions
CPE cpe:2.3:h:schneider-electric:140noe77111:-:::::::* Remediation No remediation found in references.
schneider-electric 140cpu65150 firmware	< 6.1
CPE cpe:2.3:o:schneider-electric:140cpu65150_firmware:::::::: Remediation No remediation found in references.
schneider-electric 140cpu65150	All versions
CPE cpe:2.3:h:schneider-electric:140cpu65150:-:::::::* Remediation No remediation found in references.
schneider-electric 140cpu65160 firmware	< 6.1
CPE cpe:2.3:o:schneider-electric:140cpu65160_firmware:::::::: Remediation No remediation found in references.
schneider-electric 140cpu65160	All versions
CPE cpe:2.3:h:schneider-electric:140cpu65160:-:::::::* Remediation No remediation found in references.
schneider-electric 140noc78000 firmware	< 1.74
CPE cpe:2.3:o:schneider-electric:140noc78000_firmware:::::::: Remediation No remediation found in references.
schneider-electric 140noc78000	All versions
CPE cpe:2.3:h:schneider-electric:140noc78000:-:::::::* Remediation No remediation found in references.
schneider-electric 140noc78100 firmware	< 1.74
CPE cpe:2.3:o:schneider-electric:140noc78100_firmware:::::::: Remediation No remediation found in references.
schneider-electric 140noc78100	All versions
CPE cpe:2.3:h:schneider-electric:140noc78100:-:::::::* Remediation No remediation found in references.
schneider-electric 140noc77101 firmware	< 1.08
CPE cpe:2.3:o:schneider-electric:140noc77101_firmware:::::::: Remediation No remediation found in references.
schneider-electric 140noc77101	All versions
CPE cpe:2.3:h:schneider-electric:140noc77101:-:::::::* Remediation No remediation found in references.
schneider-electric tsxp574634 firmware	< 6.1
CPE cpe:2.3:o:schneider-electric:tsxp574634_firmware:::::::: Remediation No remediation found in references.
schneider-electric tsxp574634	All versions
CPE cpe:2.3:h:schneider-electric:tsxp574634:-:::::::* Remediation No remediation found in references.
schneider-electric tsxp575634 firmware	< 6.1
CPE cpe:2.3:o:schneider-electric:tsxp575634_firmware:::::::: Remediation No remediation found in references.
schneider-electric tsxp575634	All versions
CPE cpe:2.3:h:schneider-electric:tsxp575634:-:::::::* Remediation No remediation found in references.
schneider-electric tsxp576634 firmware	< 6.1
CPE cpe:2.3:o:schneider-electric:tsxp576634_firmware:::::::: Remediation No remediation found in references.
schneider-electric tsxp576634	All versions
CPE cpe:2.3:h:schneider-electric:tsxp576634:-:::::::* Remediation No remediation found in references.
schneider-electric tsxety4103 firmware	< 6.2
CPE cpe:2.3:o:schneider-electric:tsxety4103_firmware:::::::: Remediation No remediation found in references.
schneider-electric tsxety4103	All versions
CPE cpe:2.3:h:schneider-electric:tsxety4103:-:::::::* Remediation No remediation found in references.
schneider-electric tsxety5103 firmware	< 6.4
CPE cpe:2.3:o:schneider-electric:tsxety5103_firmware:::::::: Remediation No remediation found in references.
schneider-electric tsxety5103	All versions
CPE cpe:2.3:h:schneider-electric:tsxety5103:-:::::::* Remediation No remediation found in references.
schneider-electric bmxnoc0401 firmware	< 2.10
CPE cpe:2.3:o:schneider-electric:bmxnoc0401_firmware:::::::: Remediation No remediation found in references.
schneider-electric bmxnoc0401	All versions
CPE cpe:2.3:h:schneider-electric:bmxnoc0401:-:::::::* Remediation No remediation found in references.
schneider-electric bmxnor200h firmware	All versions
CPE cpe:2.3:o:schneider-electric:bmxnor200h_firmware:::::::: Remediation No remediation found in references.
schneider-electric bmxnor200h	All versions
CPE cpe:2.3:h:schneider-electric:bmxnor200h:-:::::::* Remediation No remediation found in references.

Change History

18 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Apr 10, 2024	CPE Deprecation Remap	[email protected]
Apr 10, 2024	CPE Deprecation Remap	[email protected]
Apr 10, 2024	CPE Deprecation Remap	[email protected]
Apr 10, 2024	CPE Deprecation Remap	[email protected]
Apr 10, 2024	CPE Deprecation Remap	[email protected]
Apr 10, 2024	CPE Deprecation Remap	[email protected]
Apr 10, 2024	CPE Deprecation Remap	[email protected]
Apr 10, 2024	CPE Deprecation Remap	[email protected]
Apr 10, 2024	CPE Deprecation Remap	[email protected]
Apr 10, 2024	CPE Deprecation Remap	[email protected]
Apr 10, 2024	CPE Deprecation Remap	[email protected]
Apr 10, 2024	CPE Deprecation Remap	[email protected]
Apr 10, 2024	CPE Deprecation Remap	[email protected]
Apr 10, 2024	CPE Deprecation Remap	[email protected]
Dec 14, 2020	Initial Analysis	[email protected]

CVE-2020-7540 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation