Schneider.Modicon.M340.Password.Buffer.Overflow

Description

This indicates an attack attempt against a Buffer Overflow Vulnerability on Schneider Electric Modicon M340
The vulnerability is due to an improper boundary check condition in the application. A remote attacker may be able to exploit this to execute arbitrary code within the system via a crafted request.

Affected Products

BMXNOC0401,
BMXNOE0100,
BMXNOE0100H,
BMXNOE0110,
BMXNOE0110H,
BMXNOR0200,
BMXNOR0200H,
BMXP342020,
BMXP342020H,
BMXP342030,
BMXP3420302,
BMXP3420302H,
BMXPRA0100.

Impact

System Compromise: Remote attackers can gain control of vulnerable system

Recommended Actions

Apply the most recent upgrade or patch from the vendor.
http://www.schneider-electric.com/ww/en/download/document/SEVD-2015-344-01

References