CVE-2024-5056 Information disclosure in Modicon M340

Medium 6.5 Published 12 Jun 2024 Updated 1 Aug 2024

Attackers can access external files or directories, potentially preventing firmware updates and disrupting webserver behavior on Schneider Electric Modicon network modules.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2024-5056?

CVE-2024-5056 is a medium-severity vulnerability in Schneider Electric Modicon M340, published on 12 Jun 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

CWE-552: Files or Directories Accessible to External Parties vulnerability exists which may prevent user to update the device firmware and prevent proper behavior of the webserver when specific files or directories are removed from the filesystem.

Weakness: CWE-552

Which versions are affected by CVE-2024-5056?

It affects 3 products.

Products include Schneider-Electric Bmxnoe0100 Firmware, Schneider-Electric Bmxnoe0110 Firmware, Schneider-Electric Modicon M340 Firmware.

How do I fix CVE-2024-5056?

No fix has been published for CVE-2024-5056 yet. Limit exposure of the affected software until one is available.

Is CVE-2024-5056 being exploited?

There is no known exploitation of CVE-2024-5056 in the wild and no public exploit code.

CVE-2020-7536 Denial of service in Modicon M340 CPUs (BMXP34* versions prior to V3.30) and Modicon M340 Communication Ethernet modules (BMXNOE0100 (H) versions prior to V3.4, BMXNOE0110 (H) versions prior to V6.6, and BMXNOR0200H all versions) High 7.5

Sources

Also known as GHSA-fm6m-fmh2-f72v.