CVE-2020-7534
A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists on the web server used, that could cause a leak of sensitive data or unauthorized actions on the web server during the time the user is logged in. Affected Products: Modicon M340 CPUs: BMXP34 (All Versions), Modicon Quantum CPUs with integrated Ethernet (Copro): 140CPU65 (All Versions), Modicon Premium CPUs with integrated Ethernet (Copro): TSXP57 (All Versions), Modicon M340 ethernet modules: (BMXNOC0401, BMXNOE01, BMXNOR0200H) (All Versions), Modicon Quantum and Premium factory cast communication modules: (140NOE77111, 140NOC78*00, TSXETY5103, TSXETY4103) (All Versions)
Published:Feb 4, 2022
Last Modified:May 28, 2026
EPS:Feb 4, 2022
EPSS Score:0.00178
CVSS Score:7.1
Affected Products
Vendor
Product
Action
Vendor
Schneider-electric
Product
140cpu65
Schneider-electric
140cpu65
Vendor
Schneider-electric
Product
140cpu65 Firmware
Schneider-electric
140cpu65 Firmware
Vendor
Schneider-electric
Product
140noc78000
Schneider-electric
140noc78000
Vendor
Schneider-electric
Product
140noc78000 Firmware
Schneider-electric
140noc78000 Firmware
Vendor
Schneider-electric
Product
140noe77111
Schneider-electric
140noe77111
Vendor
Schneider-electric
Product
140noe77111 Firmware
Schneider-electric
140noe77111 Firmware
Vendor
Schneider-electric
Product
Bmxnoc0401
Schneider-electric
Bmxnoc0401
Vendor
Schneider-electric
Product
Bmxnoc0401 Firmware
Schneider-electric
Bmxnoc0401 Firmware
Vendor
Schneider-electric
Product
Bmxnoe01
Schneider-electric
Bmxnoe01
Vendor
Schneider-electric
Product
Bmxnoe01 Firmware
Schneider-electric
Bmxnoe01 Firmware
Vendor
Schneider-electric
Product
Bmxnor0200h
Schneider-electric
Bmxnor0200h
Vendor
Schneider-electric
Product
Bmxnor0200h Firmware
Schneider-electric
Bmxnor0200h Firmware
Vendor
Schneider-electric
Product
Modicon M340 Bmxp342020
Schneider-electric
Modicon M340 Bmxp342020
Vendor
Schneider-electric
Product
Modicon M340 Bmxp342020 Firmware
Schneider-electric
Modicon M340 Bmxp342020 Firmware
Vendor
Schneider-electric
Product
Tsxety4103
Schneider-electric
Tsxety4103
Vendor
Schneider-electric
Product
Tsxety4103 Firmware
Schneider-electric
Tsxety4103 Firmware
Vendor
Schneider-electric
Product
Tsxety5103
Schneider-electric
Tsxety5103
Vendor
Schneider-electric
Product
Tsxety5103 Firmware
Schneider-electric
Tsxety5103 Firmware
Vendor
Schneider-electric
Product
Tsxp57
Schneider-electric
Tsxp57
Vendor
Schneider-electric
Product
Tsxp57 Firmware
Schneider-electric
Tsxp57 Firmware
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
