Skip to content
OpenAdvisories
High ICSA-25-238-03 1 CVE

Schneider Electric Modicon M340 Controller and Communication Modules (Update A)

Published Aug 12, 2025 · Updated Jun 4, 2026 · Revision 3

Vendor: Schneider Electric Product: Ethernet / Serial RTU Module Product: M580 Global Data module Product: Modbus/TCP Ethernet Modicon M340 FactoryCast module Product: Modbus/TCP Ethernet Modicon M340 module Product: Modicon M340 Controller Product: Modicon M340 Firmware Product: Modicon M340 X80 Ethernet Communication modules

Summary

Schneider Electric is aware of a vulnerability in its Modicon M340 https://www.se.com/ww/en/product-range/1468-modicon-m340-pac/, BMXNOR0200H https://www.se.com/us/en/product/BMXNOR0200H/communication-module-modicon-m340-iec-608705101-104-dnp3-for-severe-environments/: Modicon M340 X80
Ethernet Communication Modules, BMXNGD0100 https://www.se.com/us/en/product/BMXNGD0100/communication-module-modicon-m580-global-data-service/: M580 Global Data module, BMXNOC0401 https://www.se.com/us/en/product/BMXNOC0401/network-module-modicon-m340-ethernet-ip-and-modbus-tcp-4-x-rj45/?pageType=product&sourceId=BMXNOC0401: Modicon M340
X80 Ethernet Communication modules, BMXNOE0100 https://www.se.com/ww/en/product/BMXNOE0100/network-module-modicon-m340-modbus-tcp-1-x-rj45-flash-memory-card/?pageType=product&sourceId=BMXNOE0100: Modbus/TCP Ethernet Modicon M340 module,
BMXNOE0110 https://www.se.com/ww/en/product/BMXNOE0110/ethernet-tcp-ip-network-module-modicon-m340-automation-platform-flash-memory-card-internal-ram-16-mb-1-x-rj45-10-100/: Modbus/TCP Ethernet Modicon M340 FactoryCast module product(s).
Failure to apply the fix provided below may risk Denial Of Service attack, which could result in the unavailability
of the devices.

Vulnerabilities 1

Revision history

  1. #3

    CISA Republication update based on Schneider Electric CPCERT SEVD-2025-224-05 advisory

  2. #2

    Remediation is available for Modicon M340

  3. #1

    Original Release

References