Description
A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware version prior to V2.90) and Modicon M340 (firmware version prior to V3.10), which could cause a possible denial of service when writing to specific memory addresses in the controller over Modbus.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric SE | Modicon M580 | firmware version prior to V2.90 | — |
| Schneider Electric SE | Modicon M340 | firmware version prior to V3.10 | — |
Advisories 2
- SEVD-2019-134-11 Multiple Vulnerabilities in Modicon Controller Products Schneider Electric CPCERT · Sep 8, 2026
- ICSA-25-114-01 Schneider Electric Modicon Controllers (Update A) CISA ICS & IT advisories · Apr 23, 2026