Skip to content
OpenAdvisories
High ICSA-25-035-04 1 CVE

Schneider Electric EcoStruxure Power Monitoring Expert (PME) (Update A)

Published Jan 14, 2025 · Updated Apr 8, 2025 · Revision 2

Vendor: Schneider Electric Product: BMENOR2200H Product: EVLink Pro AC Product: Modicon M580 CPU (part numbers BMEP* and BMEH*, excluding M580 CPU Safety) Product: Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S)

Summary

Schneider Electric is aware of a vulnerability in its Modicon M580 PLCs (Programmable Logic Controllers) https://www.se.com/ww/en/product-range/62098-modicon-m580-epac/?parent-subcategory-id=3950&filter=business-1-industrial-automation-and-control#products ,
BMENOR2200H https://www.se.com/ww/en/product/BMENOR2200H/modicon-x80-module-coupleur-rtu-%C3%A9volu%C3%A9-sur-ethernet-1-port-s%C3%A9rie-durci/ and EVLink Pro AC https://www.se.com/ww/en/product-range/23107242-evlink-pro-ac/#products products.
Modicon M580 PLCs https://www.se.com/ww/en/product-subcategory/3950-pac-programmable-automation-controllers/?filter=business-1-industrial-automation-and-control control and monitor industrial operations.
BMENOR2200H https://www.se.com/ww/en/product/BMENOR2200H/modicon-x80-module-coupleur-rtu-%C3%A9volu%C3%A9-sur-ethernet-1-port-s%C3%A9rie-durci/ is an advanced RTU communication module for Modicon M580 PLCs.
EVLink Pro AC https://www.se.com/ww/en/product-range/23107242-evlink-pro-ac/#products is a 3rd generation of AC charging station.
Failure to apply the fix or mitigations provided below may risk buffer overflow attack, which could result in
Denial-of-Service.

Vulnerabilities 1

Revision history

  1. #2.0.0

    A remediation is now available for BMENOR2200H.

  2. #1.0.0

    Original Release

References