CVE-2020-7549

medium

Published 2020-12-11 · Modified 2026-05-28

💬 Discuss on Community ✚ Propose mitigation

CVSS v3

5.3

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CVSS v4 NEW

—

not yet in upstream

VIR risk

5.3

Description

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause denial of HTTP and FTP services when a series of specially crafted requests is sent to the controller over HTTP.

Predictions

Exploit likelihood

63%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No mitigations published for this CVE yet.

The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.

✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here with source_tier=community-verified.

Application impact

Vendor	Product	Versions
schneider-electric	modicon_m340_bmxp341000	`-`
schneider-electric	modicon_m340_bmxp342000	`-`
schneider-electric	modicon_m340_bmxp3420102	`-`
schneider-electric	modicon_m340_bmxp3420102cl	`-`
schneider-electric	modicon_m340_bmxp342020	`-`
schneider-electric	modicon_m340_bmxp3420302	`-`
schneider-electric	modicon_m340_bmxp3420302cl	`-`
schneider-electric	bmxnoe0100	`-`
schneider-electric	bmxnoe0110	`-`
schneider-electric	bmxnoc0401	`-`
schneider-electric	140noe77111	`-`
schneider-electric	140noc78100	`-`
schneider-electric	140noc78000	`-`
schneider-electric	140cpu65150	`-`
schneider-electric	tsxety4103	`-`
schneider-electric	tsxety5103	`-`
schneider-electric	tsxp574634	`-`
schneider-electric	tsxp575634	`-`
schneider-electric	tsxp576634	`-`

References

https://www.se.com/ww/en/download/document/SEVD-2020-343-06/

CWEs

CWE-754

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.