Skip to content
OpenAdvisories
High SEVD-2018-081-01 4 CVEs

Embedded FTP Servers for Modicon PAC Controllers

Published Mar 22, 2018 · Updated Aug 13, 2024 · Revision 10

Vendor: Schneider Electric Product: Legacy Modicon Premium and Quantum Product: Modicon M340 Product: Modicon M580 Product: Modicon M580 CPU Safety Product: Modicon RTU BMXNOR0200H Product: Modicon X80 Ethernet Communication Module

Summary

Schneider Electric is aware of multiple vulnerabilities in the FTP servers of its Modicon PAC controllers.

Modicon PACs (Programmable Automation Controllers) control and monitor industrial operations in a sustainable, flexible, efficient, and protected way. Our PLCs and PACs supply edge technology, augmenting it with Ethernet connectivity, built-in cybersecurity, and processing power needed to handle Big Data analysis and protect against new vulnerabilities among connected industrial assets, across devices or into the cloud.

Failure to address these vulnerabilities could result in unauthorized access to your PLC and a denial of service or other malicious activity.

March 2023 Update: Remediation for the Modicon M580 CPU is available for download

Vulnerabilities 4

Revision history

  1. #9.0.0

    A remediation is available for the Modicon M580 CPU Safety (page 4).

  2. #8.0.0

    Remediation for the Modicon M580 CPU is available for download

  3. #7.0.0

    A remediation is available for CVE-2018-7242 on Modicon M340 Ethernet Communication Modules BMXNOE0100 (H) and BMXNOE0110 (H).

  4. #6.0.0

    The Modicon M580 SV4.02 firmware has been retracted for quality issues and is no longer available for download. Additional mitigations have been introduced for Modicon M580 CPU and M580 CPU Safety, and we urge customers to deploy these mitigations to further reduce the risk of potential exploitation of identified vulnerabilities.

  5. #5.0.0

    Adding a clarification to the list of affected products by splitting Modicon M580 and Modicon M580 Safety CPU ranges. The purpose of the notification update is to inform customers that the latest fix Modicon M580 SV4.02 does not apply to the Safety range of M580. It is highly recommended that customers using Modicon M580 Safety ranges continue to implement the mitigations shared in this document.

  6. #4.0.0

    A remediation is available for Modicon X80 Ethernet Communication module BMXNOC0401 and BMXNOR0200H RTU.

  7. #3.1.0

    The version number for Modicon M580that addresses these vulnerabilities has been updated from V4.01 to V4.02.

  8. #3.0.0

    A fix is available for Modicon M340 v3.50 that addresses the CVE-2018-7242 vulnerability. The list of impacted offers and version details have been updated for CVE-2018-7240, CVE-2018-7241, CVE-2018-7242 and CVE-2011-4859 vulnerabilities.

  9. #2.0.0

    Updated CVSS scores and addition of Modicon M580 and clarification on Modicon M340 affected products.

  10. #1.0.0

    Original Release

References