Cross-site request forgery in Modicon M340 CPUs: BMXP34 , Modicon Quantum CPUs with…
Priority LOW 38CWE-352Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Tampering
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-352.
Summary
A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists on the web server used, that could cause a leak of sensitive data or unauthorized actions on the web server during the time the user is logged in. Affected Products: Modicon M340 CPUs: BMXP34 (All Versions), Modicon Quantum CPUs with integrated Ethernet (Copro): 140CPU65 (All Versions), Modicon Premium CPUs with integrated Ethernet (Copro): TSXP57 (All Versions), Modicon M340 ethernet modules: (BMXNOC0401, BMXNOE01, BMXNOR0200H) (All Versions), Modicon Quantum and Premium factory cast communication modules: (140NOE77111, 140NOC78*00, TSXETY5103, TSXETY4103) (All Versions)
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00358 29th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Modicon M340 CPUs: BMXP34 (All Versions), Modicon Quantum CPUs with integrated Ethernet (Copro): 140CPU65 (All Versions), Modicon Premium CPUs with integrated Ethernet (Copro): TSXP57 (All Versions), Modicon M340 ethernet modules: (BMXNOC0401, BMXNOE01, BMXNOR0200H) (All Versions), Modicon Quantum and Premium factory cast communication modules: (140NOE77111, 140NOC78*00, TSXETY5103, TSXETY4103) | all versions | — | No fix listed | CNA |
- Modicon M340 CPUs: BMXP34 (All Versions), Modicon Quantum CPUs with integrated Ethernet (Copro): 140CPU65 (All Versions), Modicon Premium CPUs with integrated Ethernet (Copro): TSXP57 (All Versions), Modicon M340 ethernet modules: (BMXNOC0401, BMXNOE01, BMXNOR0200H) (All Versions), Modicon Quantum and Premium factory cast communication modules: (140NOE77111, 140NOC78*00, TSXETY5103, TSXETY4103) Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 20
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:schneider-electric:modicon_m340_bmxp342020_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:modicon_m340_bmxp342020:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:140cpu65_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:140cpu65:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:tsxp57_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:tsxp57:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:bmxnoc0401_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:bmxnoc0401:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:bmxnoe01_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:bmxnoe01:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
- cpe:2.3:o:schneider-electric:modicon_m340_bmxp342020_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:modicon_m340_bmxp342020:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:140cpu65_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:140cpu65:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:tsxp57_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:tsxp57:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:bmxnoc0401_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:bmxnoc0401:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:bmxnoe01_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:bmxnoe01:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
Show 10 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:schneider-electric:bmxnor0200h_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:bmxnor0200h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:140noe77111_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:140noe77111:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:140noc78000_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:140noc78000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:tsxety5103_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:tsxety5103:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:tsxety4103_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:tsxety4103:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
- cpe:2.3:o:schneider-electric:bmxnor0200h_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:bmxnor0200h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:140noe77111_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:140noe77111:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:140noc78000_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:140noc78000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:tsxety5103_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:tsxety5103:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:tsxety4103_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:tsxety4103:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2020-7534
- 2026-10-03 Alias added: GHSA-5g6x-5wq6-p6g5
More Schneider Electric 140cpu65 Firmware vulnerabilities
- TI-2023-10920 Improper check for unusual conditions in Schneider Electric Modicon M340 CPU CVSS 3.1MEDIUM 6.5
Sources
- CVE-2020-7534 · CVE Program
- CVE-2020-7534 · NVD
- FIRST EPSS
- GHSA-5g6x-5wq6-p6g5 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences