Skip to content
OpenAdvisories
High ICSA-24-326-04 3 CVEs

Schneider Electric Modicon M340, MC80, and Momentum Unity M1E (Update B)

Published Nov 12, 2024 · Updated Jan 20, 2026 · Revision 4

Vendor: Schneider Electric Product: Modicon M340 CPU Controller Product: Modicon M340 CPU Firmware Product: Modicon MC80 Controller Product: Modicon MC80 Firmware Product: Modicon Momentum Unity M1E Processor Product: Modicon Momentum Unity M1E Processor Controller

Summary

Schneider Electric is aware of multiple vulnerabilities in its Modicon Controllers M340 / Momentum / MC80 products.Modicon PAC control and monitor industrial operations.Failure to apply the provided remediations/mitigations below may risk unauthorized access to the controller, which could result in the possibility of denial of service and loss of confidentiality, integrity of the controller.January 2026 Update: Remediation is now available for Modicon MC80.

Vulnerabilities 3

Revision history

  1. #4

    Initial Republication of Schneider Electric CPCERT SEVD-2024-317-03 advisory

  2. #3

    A remediation is now available for Modicon MC80. Enhancements for CSAF: Modified known affected, known-not-affected, and fixed products.

  3. #2

    A remediation is now available for Modicon Momentum Unity M1E Processor.

  4. #1

    Original Release

References