Schneider Electric communication modules for Modicon M580 and Quantum controllers (Update B)
Successful exploitation of this vulnerability could allow a stack overflow attack, which could result in loss of confidentiality, integrity, and denial of service of the device.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-29999US | critical9.8 | — | ||
An issue was discovered in Wind River VxWorks through 6.8. There is a possible stack overflow in dhcp server. | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-25-058-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-25-058-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (9)
- Mitigation140CRA31200 (Quantum RIO Drop) 140CRA31200
Install physical controls so no unauthorized personnel can access your industrial control and safety systems, components, peripheral equipment, and networks.
- Mitigation140CRA31908 (M580 Quantum S908 RIO Drop Adapter) 140CRA31908
Install physical controls so no unauthorized personnel can access your industrial control and safety systems, components, peripheral equipment, and networks.
- MitigationModicon M580 communication modules BMECRA BMECRA31210
Install physical controls so no unauthorized personnel can access your industrial control and safety systems, components, peripheral equipment, and networks.
- MitigationModicon M580 communication modules BMENOC BMENOC0321
Install physical controls so no unauthorized personnel can access your industrial control and safety systems, components, peripheral equipment, and networks.
- MitigationModicon M580/Quantum communication modules BMXCRA BMXCRA31200
Install physical controls so no unauthorized personnel can access your industrial control and safety systems, components, peripheral equipment, and networks.
- MitigationModicon M580/Quantum communication modules BMXCRA BMXCRA31210
Install physical controls so no unauthorized personnel can access your industrial control and safety systems, components, peripheral equipment, and networks.
- FixedModicon M580 communication modules BMECRA BMECRA31210
Modicon M580 communication modules BMECRA BMECRA31210, Modicon M580/Quantum communication modules BMXCRA BMXCRA31200/BMXCRA31210: Version SV02.80 of BMECRA31210, BMXCRA31200, BMXCRA31210 includes a fix for these vulnerabilities and is available for download.
https://www.se.com/ww/en/product-country-selector/?pageType=product&sourceId=BMXCRA31210 - FixedModicon M580 communication modules BMENOC BMENOC0321
Modicon M580 communication modules BMENOC BMENOC0321: Version SV1.10 of BMENOC0321 includes a fix for this vulnerability and is available for download.
https://www.se.com/ww/en/product/BMENOC0321/m580-noc-control/ - FixedModicon M580/Quantum communication modules BMXCRA BMXCRA31200
Modicon M580 communication modules BMECRA BMECRA31210, Modicon M580/Quantum communication modules BMXCRA BMXCRA31200/BMXCRA31210: Version SV02.80 of BMECRA31210, BMXCRA31200, BMXCRA31210 includes a fix for these vulnerabilities and is available for download.
https://www.se.com/ww/en/product-country-selector/?pageType=product&sourceId=BMXCRA31210
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan