Skip to content
OpenAdvisories
High ICSA-23-227-01 1 CVE

Schneider Electric EcoStruxure Control Expert, Process Expert, Modicon M340, M580 and M580 CPU (Update A)

Published Jan 10, 2023 · Updated May 5, 2026 · Revision 8

Vendor: Schneider Electric Product: EcoStruxure Control Expert Product: Modicon M340 Product: Modicon M340 CPU Product: Modicon M580 CPU Product: Modicon M580 CPU Safety Product: Modicon MC80 Product: Modicon Momentum Unity M1E Processor

Summary

Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ Control Expert, Modicon M340, Momentum, MC80, M580 and M580 CPU Safety. The Modicon M580 are PAC and Safety PLCs with built-in Ethernet for process, high availability & safety solutions. The Modicon M340 offers compactness, flexibility, scalability, and robustness for the process industry and a wide range of demanding automation applications. The Modicon MC80 provides optimized operation, withstanding extreme conditions with high reliability and performance. The Modicon Momentum supports control and distributed I/O system with 4 fundamental components that easily snap together in various combinations to form versatile control systems or sub-systems. EcoStruxure™ Control Expert is the common programming, debugging and operating software for Modicon PLCs (Programmable Logic Controllers) and PACs (Programmable Automation Controllers). Failure to apply the mitigations provided below may risk unauthorized access to your PLC, which could result in the possibility of denial of service and loss of confidentiality and integrity of the controller.

Vulnerabilities 1

Revision history

  1. #8

    CISA Republication update based on Schneider Electric CPCERT SEVD-2023-010-06 advisory

  2. #7

    Remediations are available for EcoStruxure Control Expert, Modicon Momentum, and Modicon M340.

  3. #6

    A remediation is available for Modicon M580 CPU Safety(page 2).

  4. #5

    A remediation is available for Modicon M580

  5. #4

    CISA Republication - Initial Publication

  6. #3

    All versions of the EcoStruxure™ Process Expert are impacted by this vulnerability

  7. #2

    Modicon Momentum Unity M1E Process (page 6) and Modicon MC80 were added to the impacted products with the mitigations (page 7).

  8. #1

    Original Release

References