Critical SEVD-2019-134-11 22 CVEs

Multiple Vulnerabilities in Modicon Controller Products

Published May 14, 2019 · Updated Sep 8, 2026 · Revision 18

Vendor: Schneider Electric Product: EcoStruxure Control Expert Product: Modicon M340 Controller Product: Modicon M340 Firmware Product: Modicon M580 Controller Product: Modicon M580 Firmware Product: Modicon MC80 Controller Product: Modicon MC80 Firmware Product: Modicon Momentum Unity M1E Processor (part numbers 171CBU*) Controller Product: Modicon Momentum Unity M1E Processor Firmware Product: Modicon Premium Controller Product: Modicon Premium Firmware Product: Modicon Quantum Controller Product: Modicon Quantum Firmware Product: Modicon Quantum Safety Controller Product: Modicon Quantum Safety Firmware Product: PLC Simulator

Summary

Schneider Electric is aware of multiple vulnerabilities in its Modicon Controller products.
The [Modicon Programmable Automation controllers](https://www.se.com/ww/en/product-subcategory/3950-pac-programmable-automation-controllers/) are used for complex networked communication, display
and control applications
Failure to apply the mitigations or remediations provided below may risk execution of unsolicited command on
the PLC which could result in a loss of availability of the controller.

Vulnerabilities 22

High 7.5

CVE-2018-7852 Public exploit

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, …

May 22, 2019
High 7.5

CVE-2019-6829

A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware version prior to V2.90) and Modicon M340 (…

Schneider Electric Modicon M580 Modicon M340 ICS / OT

Sep 17, 2019
Unscored —

CVE-2018-7842 Public exploit EPSS 35%

A CWE-290: Authentication Bypass by Spoofing vulnerability exists in all versions of the Modicon M580, Modicon M340, Mo…

May 22, 2019
Unscored —

CVE-2018-7843 Public exploit

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, …

May 22, 2019
Unscored —

CVE-2018-7844 Public exploit

A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum…

May 22, 2019
Unscored —

CVE-2018-7845 Public exploit

A CWE-125: Out-of-bounds Read vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, …

May 22, 2019
Unscored —

CVE-2018-7846 Public exploit EPSS 30%

A CWE-501: Trust Boundary Violation vulnerability on connection to the Controller exists in all versions of the Modicon…

May 22, 2019
Unscored —

CVE-2018-7847

A CWE-284: Improper Access Control vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quan…

May 22, 2019
Unscored —

CVE-2018-7848 Public exploit

A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum…

May 22, 2019
Unscored —

CVE-2018-7849 Public exploit

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum a…

May 22, 2019
Unscored —

CVE-2018-7850

A CWE-807: Reliance on Untrusted Inputs in a Security Decision vulnerability exists in all versions of the Modicon M580…

May 22, 2019
Unscored —

CVE-2018-7853

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, …

May 22, 2019
Unscored —

CVE-2018-7854 Public exploit

A CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, a…

May 22, 2019
Unscored —

CVE-2018-7855

A CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, a…

May 22, 2019
Unscored —

CVE-2018-7856

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, …

May 22, 2019
Unscored —

CVE-2018-7857

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, …

May 22, 2019
Unscored —

CVE-2019-6806

A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum…

May 22, 2019
Unscored —

CVE-2019-6807

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, …

May 22, 2019
Unscored —

CVE-2019-6808

A CWE-284: Improper Access Control vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quan…

May 22, 2019
Unscored —

CVE-2019-6809

A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware versions prior to V2.90), Modicon M340 (fi…

Schneider Electric Modicon M340 Modicon M580 Modicon Quantum ICS / OT

Sep 17, 2019
Unscored —

CVE-2019-6828

A CWE-248: Uncaught Exception vulnerability exists Modicon M580 (firmware version prior to V2.90), Modicon M340 (firmwa…

Schneider Electric Modicon M340 Modicon M580 Modicon Quantum ICS / OT

Sep 17, 2019
Unscored —

CVE-2019-6830

A CWE-248: Uncaught Exception vulnerability exists IN Modicon M580 all versions prior to V2.80, which could cause a pos…

Schneider Electric Modicon M580 ICS / OT

Sep 17, 2019

Revision history

2026-09-08 #14.0.0
Remediation is available for CVE-2018-7855 in Modicon MC80.
2026-04-14 #13.0.0
Remediation is available for CVE-2018-7855 in Modicon Momentum controller (Page 9)
2025-02-11 #12.0.0
Correction of CVE list impacting Quantum Safety processor.
2024-07-09 #11.0.0
Modicon MC80 and Momentum M1E PLCs were added as impacted products of CVE 2018-7855. Mitigations are available for Modicon MC80 and Momentum M1E PLCs for CVE-2018-7855.
2024-02-13 #10.0.0
A remediation is available for Modicon M340 and M580 for CVE-2018-7855. Updated products affected version numbers.
2023-03-14 #9.0.0
A remediation is available for Modicon Momentum Unity M1E Processor part numbers 171CBU* for CVE-2018-7857 and CVE-2019-6807
2023-01-10 #8.0.0
Modicon M340 and M580 latest firmware versions are affected by CVE-2018-7855 and additional mitigations were added in the mitigation section.
2022-09-13 #7.0.0
Modicon MC80 and PLC Simulator for EcoStruxure™ Control Expert were added as impacted product of CVE-2018-7857 and CVE-2019-6807 and the remediation is provided.
2020-12-08 #6.0.0
A fix for additional attack scenario is available on M340 v3.30 for CVE-2018-7857.
2020-10-12 #5.0.0
Additional required remediation steps added for M580 and M340 applicable to the following CVEs: • CVE-2018-7846 • CVE-2018-7849 • CVE-2018-7843 • CVE-2018-7848 • CVE-2018-7842 • CVE-2018-7847 • CVE-2018-7850 • CVE-2018-7845 • CVE-2018-7852 • CVE-2018-7853 • CVE-2018-7854 • CVE-2018-7855 • CVE-2018-7856 • CVE-2018-7857 • CVE-2019-6807 • CVE-2019-6808 • CVE-2019-6830 • CVE-2019-6828 • CVE-2019-6829 • CVE-2019-6809
2020-08-11 #4.1.0
Updated fix version information for CVE-2018-7857: • Additional fixes available for M580 v3.10 • Quantum & Premium previous fix is not enough to correct the CVE and requires the additional mitigations proposed
2020-05-12 #4.0.0
Updated fix version information for CVE-2018-7857
2019-12-10 #3.0.0
Updated: • CVE-2019-6806: Corrected remediation information for Modicon M340 • CVE-2018-7845: Fix for Premium & Quantum • CVE-2018-7843: Fix for Premium & Quantum • CVE-2019-6809: Fix for Premium & Quantum • CVE-2019-6807: Fix for Premium & Quantum • CVE-2018-7857: Fix for Premium & Quantum • CVE-2018-7856: Fix for Premium & Quantum • CVE-2018-7852: Fix for Premium & Quantum • CVE-2019-6828: Fix for Premium & Quantum • Update of download links for latest versions of M580 / M340 & Quantum, plus customer support information for Premium.
2019-08-13 #2.0.0
Updated: • CVE-2018-7846: added fix available for M340 v3.10 • CVE-2018-7849: added fix available for M340 v3.10 • CVE-2018-7848: added fix available for M340 v3.10 • CVE-2018-7842: added fix available for M340 v3.10 • CVE-2018-7847: added fix available for M340 v3.10 • CVE-2018-7850: added fix available for M340 v3.10 • CVE-2018-7854: added fix available for M340 v3.10 • CVE-2018-7852: modified to change M580 release which was erroneous (2.80 instead of 2.90) • CVE-2018-7855: added fix available for M340 v3.10 • CVE-2019-6807: added fix available for M340 v3.10 • CVE-2019-6808: added fix available for M340 V3.10 • CVE-2018-7843: modified to change M340 release which was erroneous (3.01 instead of 3.10) • CVE-2018-7856: added fix on M340 v3.10 (available earlier than expected) Added 4 new CVEs: • CVE-2019-6830 • CVE-2019-6828 • CVE-2019-6829 • CVE-2019-6809
2019-07-24 #1.3.0
Updated links to M580 v2.90 Firmware
2019-07-12 #1.2.0
Updated mitigations for CVE-2019-6808
2019-07-09 #1.1.0
Updated to include links to M580 V2.90 Firmware and Control Expert Hot Fix v14.0
2019-05-14 #1.0.0
Original Release

References

Multiple Vulnerabilities in Modicon Controller Products - SEVD-2019-134-11 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2019-134-11&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2019-134-11_Modicon_Controllers_Security_Notification.pdf
Recommended Cybersecurity Best Practices
https://www.se.com/ww/en/download/document/7EN52-0390/