Description
CWE-552: Files or Directories Accessible to External Parties vulnerability exists which may
prevent user to update the device firmware and prevent proper behavior of the webserver when
specific files or directories are removed from the filesystem.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | Modicon M340 | All versions | — |
| Schneider Electric | Network module, Modicon M340, Modbus/TCP BMXNOE0100 | All versions | — |
| Schneider Electric | Network module, Modicon M340, Ethernet TCP/IP BMXNOE0110 | All Versions | — |
Advisories 2
- ICSA-25-254-09 Schneider Electric Modicon M340, BMXNOE0100, and BMXNOE0110 (Update A) CISA ICS & IT advisories · Jun 9, 2026
- SEVD-2024-163-01 Modicon M340, Modbus/TCP Ethernet Modicon M340 module, and Modbus/TCP Ethernet Modicon M340 FactoryCast module Schneider Electric CPCERT · Apr 14, 2026