CVE-2015-7937
Stack-based buffer overflow in the GoAhead Web Server on Schneider Electric Modicon M340 PLC BMXNOx and BMXPx devices allows remote attackers to execute arbitrary code via a long password in HTTP Basic Authentication data.
- EPSS
- 7.4% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
- CWE
- CWE-119
- Published
- Modified
- Record from
- the NVD, synced
Affected
- schneider-electric:bmxnoc0401
- schneider-electric:bmxnoe0100
- schneider-electric:bmxnoe0100h
- schneider-electric:bmxnoe0110
- schneider-electric:bmxnoe0110h
- schneider-electric:bmxnor0200
- schneider-electric:bmxnor0200h
- schneider-electric:bmxpra0100
- schneider-electric:modicon_m340_bmxp342020
- schneider-electric:modicon_m340_bmxp342020h
- schneider-electric:modicon_m340_bmxp342030
- schneider-electric:modicon_m340_bmxp3420302
- schneider-electric:modicon_m340_bmxp3420302h