Skip to content
OpenAdvisories
High ICSA-24-326-03 2 CVEs

Schneider Electric Modicon M340, MC80, and Momentum Unity M1E & EcoStruxure (Update A)

Published Nov 12, 2024 · Updated Jun 9, 2026 · Revision 3

Vendor: Schneider Electric Product: EcoStruxure Control Expert Product: Modicon M340 CPU Controller Product: Modicon M340 CPU Firmware Product: Modicon MC80 Controller Product: Modicon MC80 Firmware Product: Modicon Momentum Unity M1E Processor Controller Product: Modicon Momentum Unity M1E Processor Firmware

Summary

Schneider Electric is aware of multiple vulnerabilities in its Modicon Controllers M340 / Momentum / MC80 / EcoStruxure™ Control Expert products. [Modicon PAC](https://www.se.com/ww/en/product-subcategory/3950-pac-programmable-automation-controllers/?filter=business-1-industrial-automation-and-control) products control and monitor industrial operations. [EcoStruxure™ Control Expert](https://www.se.com/ww/en/product-range/548-ecostruxure-control-expert-unity-pro/#overview) is the engineering application for Modicon Controllers. Failure to apply the provided remediations/mitigations below may risk unauthorized access to the controller, which could result in the possibility of denial of service and loss of confidentiality, integrity of the controller.

Vulnerabilities 2

Revision history

  1. #3

    CISA Republication update based on Schneider Electric CPCERT SEVD-2024-317-02 advisory

  2. #2

    EcoStruxure™ Control Expert is added as affected offer and remediations are available for Modicon M340, EcoStruxure™ Control Expert, Modicon Momentum.

  3. #1

    Original Release

References