Summary
Schneider Electric is aware of a vulnerability in its Modicon M241 / M251 / M258 https://www.se.com/ww/en/product-category/3900-plc-pac-and-dedicated-controllers/ and Modicon LMC058 https://www.se.com/ww/en/product-range/7744-modicon-lmc058/
products.
The Modicon M241/M251/M258/LMC058 products are Programmable Logic Controllers for performance-demanding applications.
Failure to apply the Fix provided below may risk a denial of service and partial loss of Integrity of the controller,
which could result in disruption operations.
October 2025 Update: A remediation is now available for Modicon M258 / LMC058
Vulnerabilities 1
-
Critical 9.8
CWE-20: Improper Input Validation vulnerability exists that could lead to a denial of service and a loss of confidentia…
Revision history
-
#3.0.0
A remediation is now available for Modicon M258 / LMC058
-
#2.0.0
A remediation is now available for Modicon M241 / M251.
-
#1.0.0
Original Release
References
-
Modicon M241 / M251 / M258 / LMC058 - SEVD-2024-345-03 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-345-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-345-03.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390