Summary
Schneider Electric is aware of multiple vulnerabilities in its Modicon PLCs (Programmable Logic Controllers) and PACs (Programmable Automation Controllers).
Modicon PLCs (Programmable Logic Controllers) and PACs (Programmable Automation Controllers) control and monitor industrial operations in a sustainable, flexible, efficient, and protected way.
Failure to apply the remediations and mitigations provided below may risk a denial of service of the controller, which could result in disrupted operations.
Vulnerabilities 2
-
High 7.5
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service…
-
Medium 6.5
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service…
Revision history
-
#4.0.0
A remediation is available for Modicon M580 CPU Safety (page 2).
-
#3.0.0
A remediation is now available on Modicon Momentum Unity M1E Processor.
-
#2.0.0
A remediation is available for Modicon MC80.
-
#1.0.0
Original Release
References
-
Modicon PLCs (Programmable Logic Controllers) and PACs (Programmable Automation Controllers) - SEVD-2023-101-05 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-05&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-05.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/