CVE-2024-5056: medium-severity vulnerability in Schneider Electric Modicon M340
Published · Updated
Follow this CVE+ Monitor Modicon M340+ Monitor Network module, Modicon M340, Ethernet TCP/IP BMXNOE0110
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.5epss 0.4%
CWE-552: Files or Directories Accessible to External Parties vulnerability exists which may
prevent user to update the device firmware and prevent proper behavior of the webserver when
specific files or directories are removed from the filesystem.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected products
Schneider Electric · Modicon M340Schneider Electric · Network module, Modicon M340, Ethernet TCP/IP BMXNOE0110Schneider Electric · Network module, Modicon M340, Modbus/TCP BMXNOE0100Related CVEs — Schneider Electric Modicon M340
In the same product, most dangerous first.