PT-2013-3916 · Schneider Electric · Schneider Electric M340

Published 2013-04-04 · Updated 2024-08-06 · CVE-2013-2763

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Schneider Electric M340 PLC modules (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service through resource consumption via unspecified vectors. The vendor reportedly disputes this issue, stating it could not be duplicated and an attacker could not remotely exploit this observed behavior to deny PLC control functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2013-2763

Affected Products

Schneider Electric M340

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-2763 · Security Note
• http://ics-cert.us-cert.gov/pdf/ICSA-13-077-01A.pdf · Note
• https://t.me/cvenotify/89458 · Telegram Post