Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2013-2763


The Schneider Electric M340 PLC modules allow remote attackers to cause a denial of service (resource consumption) via unspecified vectors. NOTE: the vendor reportedly disputes this issue because it "could not be duplicated" and "an attacker could not remotely exploit this observed behavior to deny PLC control functions.


Security Impact Summary

CVE-2013-2763 is a security vulnerability that . Impacting 24 products from schneider-electric, from schneider-electric, from schneider-electric and 21 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

Documented in 2013, this vulnerability occurred amid the cloud computing expansion era, where traditional network perimeter security models were being reevaluated. Organizations were transitioning from isolated infrastructure to interconnected systems, creating new attack surfaces that vulnerabilities like this could exploit.


Published

2013-04-04T11:58:49.867

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.0 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-400

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System schneider-electric modicon_m340_bmx_noc_0401_firmware - Yes
Hardware schneider-electric modicon_m340_bmx_noc_0401 - No
Operating System schneider-electric modicon_m340_bmx_noe_0100_firmware - Yes
Hardware schneider-electric modicon_m340_bmx_noe_0100 - No
Operating System schneider-electric modicon_m340_bmx_noe_0100h_firmware - Yes
Hardware schneider-electric modicon_m340_bmx_noe_0100h - No
Operating System schneider-electric modicon_m340_bmx_noe_0110_firmware - Yes
Hardware schneider-electric modicon_m340_bmx_noe_0110 - No
Operating System schneider-electric modicon_m340_bmx_noe_0110h_firmware - Yes
Hardware schneider-electric modicon_m340_bmx_noe_0110h - No
Operating System schneider-electric modicon_m340_bmx_nor_0200h_firmware - Yes
Hardware schneider-electric modicon_m340_bmx_nor_0200h - No
Operating System schneider-electric modicon_m340_bmx_p34-2010_firmware - Yes
Hardware schneider-electric modicon_m340_bmx_p34-2010 - No
Operating System schneider-electric modicon_m340_bmx_p34-2030_firmware - Yes
Hardware schneider-electric modicon_m340_bmx_p34-2030 - No
Operating System schneider-electric modicon_m340_bmxp341000_firmware - Yes
Hardware schneider-electric modicon_m340_bmxp341000 - No
Operating System schneider-electric modicon_m340_bmxp342010_firmware - Yes
Hardware schneider-electric modicon_m340_bmxp342010 - No
Operating System schneider-electric modicon_m340_bmxp342020_firmware - Yes
Hardware schneider-electric modicon_m340_bmxp342020 - No
Operating System schneider-electric modicon_m340_bmxp342030_firmware - Yes
Hardware schneider-electric modicon_m340_bmxp342030 - No

References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For schneider-electric's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.