CVE-2020-7536
First published: Fri Dec 11 2020(Updated: )
A CWE-754:Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M340 CPUs (BMXP34* versions prior to V3.30) Modicon M340 Communication Ethernet modules (BMXNOE0100 (H) versions prior to V3.4 BMXNOE0110 (H) versions prior to V6.6 BMXNOR0200H all versions), that could cause the device to be unreachable when modifying network parameters over SNMP.
Credit: cybersecurity@se.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Schneider Electric BMXP341000 Firmware | <3.30 | |
| Schneider Electric BMXP341000 Firmware | ||
| Schneider Electric BMXP342000 Firmware | <3.30 | |
| Schneider Electric BMXP342000 Firmware | ||
| Schneider Electric BMXP3420102 Firmware | <3.30 | |
| Schneider Electric BMXP3420102 Firmware | ||
| schneider-electric bmxp3420102cl firmware | <3.30 | |
| Schneider Electric BMXP3420102CL | ||
| schneider-electric BMXP342020H firmware | <3.30 | |
| schneider-electric BMXP342020H firmware | ||
| Schneider Electric BMXP3420302H firmware | <3.30 | |
| Schneider Electric BMXP3420302H firmware | ||
| Schneider Electric BMXP3420302CL Firmware | <3.30 | |
| Schneider Electric BMXP3420302CL Firmware | ||
| Schneider Electric BMXNOE0100 Firmware | <3.4 | |
| schneider-electric bmxnoe0100 | ||
| schneider-electric BMXNOE0110H | <6.6 | |
| schneider-electric BMXNOE0110H | ||
| Schneider Electric BMXNOR0200H Firmware | ||
| Schneider Electric BMXNOR200H | ||
| All of | ||
| Schneider Electric Modicon M340 BMXP341000 Firmware | <3.30 | |
| Schneider Electric Modicon M340 BMXP341000 | ||
| All of | ||
| Schneider Electric Modicon M340 BMXP342000 Firmware | <3.30 | |
| Schneider Electric Modicon M340 BMXP342000 Firmware | ||
| All of | ||
| Schneider Electric Modicon M340 BMXP3420102 Firmware | <3.30 | |
| Schneider Electric Modicon M340 BMXP3420102 | ||
| All of | ||
| Schneider Electric Modicon M340 BMXP3420102CL Firmware | <3.30 | |
| Schneider Electric Modicon M340 BMXP3420102CL Firmware | ||
| All of | ||
| Schneider Electric Modicon M340 BMXP342020 Firmware | <3.30 | |
| Schneider Electric Modicon M340 BMXP342020 | ||
| All of | ||
| Schneider Electric Modicon M340 BMXP3420302 Firmware | <3.30 | |
| Schneider Electric Modicon M340 BMXP3420302 Firmware | ||
| All of | ||
| Schneider Electric Modicon M340 BMXP3420302 Firmware | <3.30 | |
| Schneider Electric Modicon M340 BMXP3420302CL | ||
| All of | ||
| Schneider Electric BMXNOE0100 Firmware | <3.4 | |
| schneider-electric bmxnoe0100 | ||
| All of | ||
| schneider-electric BMXNOE0110H | <6.6 | |
| schneider-electric BMXNOE0110H | ||
| All of | ||
| Schneider Electric BMXNOR0200H Firmware | ||
| Schneider Electric BMXNOR200H |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2020-7536.
What is the severity of CVE-2020-7536?
The severity of CVE-2020-7536 is high with a severity value of 7.5.
What software versions are affected by CVE-2020-7536?
The Modicon M340 CPUs (BMXP34* versions prior to V3.30) and Modicon M340 Communication Ethernet modules (BMXNOE0100 (H) versions prior to V3.4 BMXNOE0110 (H) versions prior to V6.6 BMXNOR0200H all versions) are affected by CVE-2020-7536.
How can I fix CVE-2020-7536?
To fix CVE-2020-7536, it is recommended to apply the necessary software updates provided by Schneider-electric.
Where can I find more information about CVE-2020-7536?
You can find more information about CVE-2020-7536 on the official Schneider-electric website.
- agent/references
- agent/type
- agent/severity
- agent/weakness
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/author
- vendor/schneider-electric
- canonical/schneider electric bmxp341000 firmware
- canonical/schneider electric bmxp342000 firmware
- canonical/schneider electric bmxp3420102 firmware
- canonical/schneider-electric bmxp3420102cl firmware
- canonical/schneider electric bmxp3420102cl
- canonical/schneider-electric bmxp342020h firmware
- canonical/schneider electric bmxp3420302h firmware
- canonical/schneider electric bmxp3420302cl firmware
- canonical/schneider electric bmxnoe0100 firmware
- canonical/schneider-electric bmxnoe0100
- canonical/schneider-electric bmxnoe0110h
- canonical/schneider electric bmxnor0200h firmware
- canonical/schneider electric bmxnor200h
- canonical/schneider electric modicon m340 bmxp341000 firmware
- canonical/schneider electric modicon m340 bmxp341000
- canonical/schneider electric modicon m340 bmxp342000 firmware
- canonical/schneider electric modicon m340 bmxp3420102 firmware
- canonical/schneider electric modicon m340 bmxp3420102
- canonical/schneider electric modicon m340 bmxp3420102cl firmware
- canonical/schneider electric modicon m340 bmxp342020 firmware
- canonical/schneider electric modicon m340 bmxp342020
- canonical/schneider electric modicon m340 bmxp3420302 firmware
- canonical/schneider electric modicon m340 bmxp3420302cl