Schneider Electric Modicon
Schneider Electric is aware of a vulnerability in its Modicon M241 / M251 / M258 https://www.se.com/ww/en/product-category/3900-plc-pac-and-dedicated-controllers/ and Modicon LMC058 https://www.se.com/ww/en/product-range/7744-modicon-lmc058/ products. The Modicon M241/M251/M258/LMC058 products are Programmable Logic Controllers for performance-demanding applications. Failure to apply the Fix provided below may risk a denial of service and partial loss of Integrity of the controller, which could result in disruption operations. October 2025 Update: A remediation is now available for Modicon M258 / LMC058
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-11737US | — | — | ||
CWE-20: Improper Input Validation vulnerability exists that could lead to a denial of service and a loss of
confidentiality, integrity of the controller when an unauthenticated cra… | ||||
references
External citations — patches, advisories, analysis.
- Modicon M241 / M251 / M258 / LMC058 - SEVD-2024-345-03 PDF Versionself
- Modicon M241 / M251 / M258 / LMC058 - SEVD-2024-345-03 CSAF Versionself
- ICS Advisory ICSA-24-352-04 JSONself
- ICS Advisory ICSA-24-352-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (8)
- MitigationModicon Controllers LMC058
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of ex * Use controllers and devices only in a protected environment to minimize network exposure and ensure that they are not accessible from public internet or untrusted networks. * Filter ports and IP through the embedded firewall. * Set up network segmentation and implement a firewall to block all unauthorized access to port 502/TCP. * Disable all unused protocols (default configuration). * For more details refer to “Cybersecurity Guidelines for EcoStruxure Machine Expert, Modicon and PacDrive Controllers and Associated Equipment User Guide”: https://www.se.com/ww/en/download/document/EIO0000004242/
https://www.se.com/ww/en/download/document/EIO0000004242/ - MitigationModicon Controllers M241
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of ex * Use controllers and devices only in a protected environment to minimize network exposure and ensure that they are not accessible from public internet or untrusted networks. * Filter ports and IP through the embedded firewall. * Set up network segmentation and implement a firewall to block all unauthorized access to port 502/TCP. * Disable all unused protocols (default configuration). * For more details refer to “Cybersecurity Guidelines for EcoStruxure Machine Expert, Modicon and PacDrive Controllers and Associated Equipment User Guide”: https://www.se.com/ww/en/download/document/EIO0000004242/
https://www.se.com/ww/en/download/document/EIO0000004242/ - MitigationModicon Controllers M251
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of ex * Use controllers and devices only in a protected environment to minimize network exposure and ensure that they are not accessible from public internet or untrusted networks. * Filter ports and IP through the embedded firewall. * Set up network segmentation and implement a firewall to block all unauthorized access to port 502/TCP. * Disable all unused protocols (default configuration). * For more details refer to “Cybersecurity Guidelines for EcoStruxure Machine Expert, Modicon and PacDrive Controllers and Associated Equipment User Guide”: https://www.se.com/ww/en/download/document/EIO0000004242/
https://www.se.com/ww/en/download/document/EIO0000004242/ - MitigationModicon Controllers M258
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of ex * Use controllers and devices only in a protected environment to minimize network exposure and ensure that they are not accessible from public internet or untrusted networks. * Filter ports and IP through the embedded firewall. * Set up network segmentation and implement a firewall to block all unauthorized access to port 502/TCP. * Disable all unused protocols (default configuration). * For more details refer to “Cybersecurity Guidelines for EcoStruxure Machine Expert, Modicon and PacDrive Controllers and Associated Equipment User Guide”: https://www.se.com/ww/en/download/document/EIO0000004242/
https://www.se.com/ww/en/download/document/EIO0000004242/ - FixedModicon Controllers LMC058
Modicon M258/LMC058 Firmware version 5.0.4.19 includes a fix for this vulnerability and can be downloaded here: https://www.se.com/ww/en/product-range/2730-modicon-m258-compact-plc-for-machine-automation/#software-and-firmware By using Controller Assistant from EcoStruxureTM Machine Expert update Modicon Controller M258/LMC058 and perform reboot.
https://www.se.com/ww/en/product-range/2730-modicon-m258-compact-plc-for-machine-automation/#software-and-firmware - FixedModicon Controllers M241
Modicon M241/M251 Firmware version 5.2.11.29 includes a fix for this vulnerability and can be updated through the Schneider Electric Software Update (SESU) application that is part of EcoStruxure Machine Expert: https://www.se.com/ww/en/product-range/2226-ecostruxure-machine-expert-software/ By using Controller Assistant update Modicon Controller M241/M251 to the latest Firmware and perform reboot.
https://www.se.com/ww/en/product-range/2226-ecostruxure-machine-expert-software/ - FixedModicon Controllers M251
Modicon M241/M251 Firmware version 5.2.11.29 includes a fix for this vulnerability and can be updated through the Schneider Electric Software Update (SESU) application that is part of EcoStruxure Machine Expert: https://www.se.com/ww/en/product-range/2226-ecostruxure-machine-expert-software/ By using Controller Assistant update Modicon Controller M241/M251 to the latest Firmware and perform reboot.
https://www.se.com/ww/en/product-range/2226-ecostruxure-machine-expert-software/ - FixedModicon Controllers M258
Modicon M258/LMC058 Firmware version 5.0.4.19 includes a fix for this vulnerability and can be downloaded here: https://www.se.com/ww/en/product-range/2730-modicon-m258-compact-plc-for-machine-automation/#software-and-firmware By using Controller Assistant from EcoStruxureTM Machine Expert update Modicon Controller M258/LMC058 and perform reboot.
https://www.se.com/ww/en/product-range/2730-modicon-m258-compact-plc-for-machine-automation/#software-and-firmware
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan