Schneider Electric EcoStruxure Power Monitoring Expert (PME) (Update A)
Schneider Electric is aware of a vulnerability in its Modicon M580 PLCs (Programmable Logic Controllers) https://www.se.com/ww/en/product-range/62098-modicon-m580-epac/?parent-subcategory-id=3950&filter=business-1-industrial-automation-and-control#products , BMENOR2200H https://www.se.com/ww/en/product/BMENOR2200H/modicon-x80-module-coupleur-rtu-%C3%A9volu%C3%A9-sur-ethernet-1-port-s%C3%A9rie-durci/ and EVLink Pro AC https://www.se.com/ww/en/product-range/23107242-evlink-pro-ac/#products products. Modicon M580 PLCs https://www.se.com/ww/en/product-subcategory/3950-pac-programmable-automation-controllers/?filter=business-1-industrial-automation-and-control control and monitor industrial operations. BMENOR2200H https://www.se.com/ww/en/product/BMENOR2200H/modicon-x80-module-coupleur-rtu-%C3%A9volu%C3%A9-sur-ethernet-1-port-s%C3%A9rie-durci/ is an advanced RTU communication module for Modicon M580 PLCs. EVLink Pro AC https://www.se.com/ww/en/product-range/23107242-evlink-pro-ac/#products is a 3rd generation of AC charging station. Failure to apply the fix or mitigations provided below may risk buffer overflow attack, which could result in Denial-of-Service.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-11425US | — | — | ||
CWE-131: Incorrect Calculation of Buffer Size vulnerability exists that could cause Denial-of-Service of the
product when an unauthenticated user is sending a crafted HTTPS packet… | ||||
references
External citations — patches, advisories, analysis.
- Modicon M580 PLCs, BMENOR2200H and EVLink Pro AC - SEVD-2025-014-01 CSAF Versionself
- Modicon M580 PLCs, BMENOR2200H and EVLink Pro AC - SEVD-2025-014-01 PDF Versionself
- ICS Advisory ICSA-25-035-04 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-035-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (8)
- MitigationBMENOR2200H
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit.• Setup network segmentation and implement a firewall to block all unauthorized access to port 443/TCP
- MitigationEVLink Pro AC
• Follow EVlink Pro AC cybersecurity guide https://www.se.com/ww/en/download/document/GEX5261101/
https://www.se.com/ww/en/download/document/GEX5261101/ - MitigationModicon M580 CPU (part numbers BMEP* and BMEH*, excluding M580 CPU Safety)
• Setup network segmentation and implement a firewall to block all unauthorized access to port 443/TCP • Configure the Access Control List following the recommendations of the user manuals: “Modicon M580, Hardware, Reference Manual”: https://www.se.com/ww/en/download/document/EIO0000001578/
https://www.se.com/ww/en/download/document/EIO0000001578/ - MitigationModicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S)
• Setup network segmentation and implement a firewall to block all unauthorized access to port 443/TCP • Configure the Access Control List following the recommendations of the user manuals: “Modicon M580, Hardware, Reference Manual”: https://www.se.com/ww/en/download/document/EIO0000001578/
https://www.se.com/ww/en/download/document/EIO0000001578/ - FixedBMENOR2200H
SV4.02.01 of BMENOR2200H firmware includes a fix for this vulnerability and is available here: https://www.se.com/ww/en/product/BMENOR2200H/communication-module-modicon-m580-iec-608705101-104-dnp3-for-severe-environments/
https://www.se.com/ww/en/product/BMENOR2200H/communication-module-modicon-m580-iec-608705101-104-dnp3-for-severe-environments/ - FixedEVLink Pro AC
V1.3.10 of EVLink Pro AC firmware includes a fix for this vulnerability and is available here: https://www.se.com/ww/en/product-range/23107242-evlink-pro-ac/#software-and-firmware
https://www.se.com/ww/en/product-range/23107242-evlink-pro-ac/#software-and-firmware - FixedModicon M580 CPU (part numbers BMEP* and BMEH*, excluding M580 CPU Safety)
SV4.30 of Modicon M580 firmware includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/product-range/62098-modicon-m580-epac/#software-and-firmware
https://www.se.com/ww/en/product-range/62098-modicon-m580-epac/#software-and-firmware - FixedModicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S)
SV4.21 of Modicon M580 firmware includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/product-range/62098-modicon-m580-epac/#software-and-firmware
https://www.se.com/ww/en/product-range/62098-modicon-m580-epac/#software-and-firmware
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan