What’s Vulnerable › Vulnerabilities

CVE-2020-7537

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-12-11 · updated 2026-06-17
• Weakness: CWE-754

Description

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions), that could cause denial of service when a specially crafted Read Physical Memory request over Modbus is sent to the controller.

Affected products

• Schneider-Electric Modicon M340 Bmxp341000 Firmware: before 3.30 — fixed in 3.30
• Schneider-Electric Modicon M340 Bmxp342000 Firmware: before 3.30 — fixed in 3.30
• Schneider-Electric Modicon M340 Bmxp3420102 Firmware: before 3.30 — fixed in 3.30
• Schneider-Electric Modicon M340 Bmxp3420102Cl Firmware: before 3.30 — fixed in 3.30
• Schneider-Electric Modicon M340 Bmxp342020 Firmware: before 3.30 — fixed in 3.30
• Schneider-Electric Modicon M340 Bmxp3420302 Firmware: before 3.30 — fixed in 3.30
• Schneider-Electric Modicon M340 Bmxp3420302Cl Firmware: before 3.30 — fixed in 3.30
• Schneider-Electric Modicon M580 Bmep581020 Firmware: before 3.20 — fixed in 3.20
• Schneider-Electric Modicon M580 Bmep582020 Firmware: before 3.20 — fixed in 3.20
• Schneider-Electric Modicon M580 Bmep582040 Firmware: before 3.20 — fixed in 3.20
• Schneider-Electric Modicon M580 Bmep583020 Firmware: before 3.20 — fixed in 3.20
• Schneider-Electric Modicon M580 Bmep583040 Firmware: before 3.20 — fixed in 3.20
• Schneider-Electric Modicon M580 Bmep584020 Firmware: before 3.20 — fixed in 3.20
• Schneider-Electric Modicon M580 Bmep584040 Firmware: before 3.20 — fixed in 3.20
• Schneider-Electric Modicon M580 Bmep585040 Firmware: before 3.20 — fixed in 3.20
• Schneider-Electric Modicon M580 Bmep586040 Firmware: before 3.20 — fixed in 3.20
• Schneider-Electric Tsxp574634 Firmware: all versions
• Schneider-Electric Tsxp575634 Firmware: all versions
• Schneider-Electric Tsxp576634 Firmware: all versions

How to fix

Upgrade to a fixed version: Schneider-Electric Modicon M340 Bmxp341000 Firmware 3.30; Schneider-Electric Modicon M340 Bmxp342000 Firmware 3.30; Schneider-Electric Modicon M340 Bmxp3420102 Firmware 3.30; Schneider-Electric Modicon M340 Bmxp3420102Cl Firmware 3.30; Schneider-Electric Modicon M340 Bmxp342020 Firmware 3.30; Schneider-Electric Modicon M340 Bmxp3420302 Firmware 3.30; Schneider-Electric Modicon M340 Bmxp3420302Cl Firmware 3.30; Schneider-Electric Modicon M580 Bmep581020 Firmware 3.20; Schneider-Electric Modicon M580 Bmep582020 Firmware 3.20; Schneider-Electric Modicon M580 Bmep582040 Firmware 3.20; Schneider-Electric Modicon M580 Bmep583020 Firmware 3.20; Schneider-Electric Modicon M580 Bmep583040 Firmware 3.20. Check the vendor advisory for mitigations.

References

• https://www.se.com/ww/en/download/document/SEVD-2020-343-08/
• https://www.se.com/ww/en/download/document/SEVD-2020-343-08/

Get alerted when CVE-2020-7537 or the next vulnerability affects your stack