Skip to content
OpenAdvisories
Medium ICSA-25-254-09 1 CVE

Schneider Electric Modicon M340, BMXNOE0100, and BMXNOE0110 (Update A)

Published Jun 11, 2024 · Updated Jun 9, 2026 · Revision 4

Vendor: Schneider Electric Product: Modbus/TCP Ethernet Modicon M340 FactoryCast module Product: Modbus/TCP Ethernet Modicon M340 module Product: Modicon M340

Summary

Schneider Electric is aware of a vulnerability in its Modicon M340 and BMXNOE0100 and
BMXNOE0110 products.
The Modicon M340 is a programmable automation controller; BMXNOE0100 and
BMXNOE0110 are network modules used with Modicon M340.
Failure to apply the mitigations provided below may prevent user to update the device firmware
and prevent proper behavior of the webserver. The BMXNOE and Modicon M340 operations
are not impacted by this vulnerability.
August Update: Remediations are available for BMXNOE0100 (Modbus/TCP Ethernet Modicon
M340 module) and BMXNOE0110 (Modbus/TCP Ethernet Modicon M340 FactoryCast module)

Vulnerabilities 1

Revision history

  1. #4

    CISA Republication update based on Schneider Electric CPCERT SEVD-2024-163-01 advisory

  2. #3

    Remediation is available for Modicon M340

  3. #2

    Remediations are available for BMXNOE0100 (Modbus/TCP Ethernet Modicon M340 module) and BMXNOE0110 (Modbus/TCP Ethernet Modicon M340 FactoryCast module)

  4. #1

    Original Release

References