Description
CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause a denial of service and loss
of confidentiality and integrity of controllers when conducting a Man-In-The-Middle attack between the
controller and the engineering workstation while a valid user is establishing a communication session. This
vulnerability is inherent to Diffie Hellman algorithm which does not protect against Man-In-The-Middle attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | Modicon M340 CPU (part numbers BMXP34*) | All versions since SV3.60 | — |
| Schneider Electric | Modicon MC80 (part numbers BMKC80) | All versions | — |
| Schneider Electric | Modicon Momentum Unity M1E Processor (171CBU*) | All Versions | — |
Advisories 2
- SEVD-2024-317-02 Modicon Controllers M340 / Momentum / MC80 & EcoStruxure™ Control Expert Schneider Electric CPCERT · Sep 8, 2026
- ICSA-24-326-03 Schneider Electric Modicon M340, MC80, and Momentum Unity M1E & EcoStruxure (Update A) CISA ICS & IT advisories · Jun 9, 2026