Advisories · Technology

Schneider Electric Modicon Momentum Unity M1E Processor (171CBU*).

Every CVE that names Schneider Electric Modicon Momentum Unity M1E Processor (171CBU*) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-8938 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

Buffer overflow in Schneider Electric Modicon M340 CPU (part numbers BMXP34*) and others
- Schneider Electric Modicon M340 CPU (part numbers BMXP34*)
- Schneider Electric Modicon MC80 (part numbers BMKC80)
- Memory corruption
Not analysed yet 13 Nov 2024
CVE-2024-8937 CVE record

CVSS 8.3 High

Buffer overflow in Schneider Electric Modicon M340 CPU (part numbers BMXP34*) and others
- Schneider Electric Modicon M340 CPU (part numbers BMXP34*)
- Schneider Electric Modicon MC80 (part numbers BMKC80)
- Memory corruption
Not analysed yet 13 Nov 2024
CVE-2024-8935 CVE record

CVSS 7.7 High

Authentication bypass by spoofing in Schneider Electric Modicon M340 CPU (part numbers BMXP34*) and others
- Schneider Electric Modicon M340 CPU (part numbers BMXP34*)
- Schneider Electric Modicon MC80 (part numbers BMKC80)
- Authentication bypass
Not analysed yet 13 Nov 2024
CVE-2024-8933 CVE record

CVSS 7.5 High

CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause retrieval of password hash that could lead to denial of service…
- Schneider Electric Modicon M340 CPU (part numbers BMXP34*)
- Schneider Electric Modicon MC80 (part numbers BMKC80)
- CWE-924
Not analysed yet 13 Nov 2024
CVE-2023-25620 CVE record

CVSS 6.5 Medium

Improper check for unusual conditions in Schneider Electric Modicon M340 CPU (part numbers BMXP34*) and others
- Schneider Electric Modicon M340 CPU (part numbers BMXP34*)
- Schneider Electric Modicon M580 CPU (part numbers BMEP* and BMEH*)
- CWE-754
Not analysed yet 19 Apr 2023
CVE-2023-25619 CVE record

CVSS 7.5 High

Improper check for unusual conditions in Schneider Electric Modicon M340 CPU (part numbers BMXP34*) and others
- Schneider Electric Modicon M340 CPU (part numbers BMXP34*)
- Schneider Electric Modicon M580 CPU (part numbers BMEP* and BMEH*)
- CWE-754
Not analysed yet 19 Apr 2023
CVE-2022-45788 CVE record

CVSS 7.5 High

Improper check for unusual conditions in Schneider Electric EcoStruxure Control Expert and others
- Schneider Electric EcoStruxure Control Expert
- Schneider Electric EcoStruxure Process Expert
- CWE-754
Not analysed yet 30 Jan 2023