Description
A CWE-248: Uncaught Exception vulnerability exists Modicon M580 (firmware version prior to V2.90), Modicon M340 (firmware version prior to V3.10), Modicon Premium (all versions), and Modicon Quantum (all versions), which could cause a possible denial of service when reading specific coils and registers in the controller over Modbus.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric SE | Modicon M580 | firmware version prior to V2.90 | — |
| Schneider Electric SE | Modicon M340 | firmware version prior to V3.10 | — |
| Schneider Electric SE | Modicon Premium | all versions | — |
| Schneider Electric SE | Modicon Quantum | all versions | — |
Advisories 2
- SEVD-2019-134-11 Multiple Vulnerabilities in Modicon Controller Products Schneider Electric CPCERT · Sep 8, 2026
- ICSA-25-114-01 Schneider Electric Modicon Controllers (Update A) CISA ICS & IT advisories · Apr 23, 2026