Description
A CWE-284: Improper Access Control vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a remote code execution by overwriting configuration settings of the controller over Modbus.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Modicon M580 Modicon M340 Modicon Quantum Modicon Premium | Modicon M580 Modicon M340 Modicon Quantum Modicon Premium | — |
Advisories 2
- SEVD-2019-134-11 Multiple Vulnerabilities in Modicon Controller Products Schneider Electric CPCERT · Sep 8, 2026
- ICSA-25-114-01 Schneider Electric Modicon Controllers (Update A) CISA ICS & IT advisories · Apr 23, 2026