Schneider Electric Modicon M340, MC80, and Momentum Unity M1E (Update B)
Schneider Electric is aware of multiple vulnerabilities in its Modicon Controllers M340 / Momentum / MC80 products.Modicon PAC control and monitor industrial operations.Failure to apply the provided remediations/mitigations below may risk unauthorized access to the controller, which could result in the possibility of denial of service and loss of confidentiality, integrity of the controller.January 2026 Update: Remediation is now available for Modicon MC80.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-8938US | — | — | ||
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could
cause a potential arbitrary code execution after a successful Man-I… | ||||
| CVE-2024-8937US | — | — | ||
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could
cause a potential arbitrary code execution after a successful Man-I… | ||||
| CVE-2024-8936US | — | — | ||
CWE-20: Improper Input Validation vulnerability exists that could lead to loss of confidentiality of controller memory
after a successful Man-In-The-Middle attack followed by sendi… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Modicon Controllers M340 / Momentum / MC80 - SEVD-2024-317-03 PDF Versionself
- Modicon Controllers M340 / Momentum / MC80 - SEVD-2024-317-03 CSAF Versionself
- ICS Advisory ICSA-24-326-04 JSONself
- ICS Advisory ICSA-24-326-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (14)
- MitigationModicon M340 CPU Firmware Versions prior to SV3.65 installed on Modicon M340 CPU Controller (part numbers BMXP34*)
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: • Setup network segmentation and implement a firewall to block all unauthorized access to port 502/TCP • Configure the Access Control List following the recommendations of the user manuals: “Modicon M340 for Ethernet Communications Modules and Processors User Manual” chapter “Messaging Configuration Parameters”: https://www.se.com/ww/en/download/document/31007131K01000/ • Consider use of external firewall devices such as EAGLE40-07 from Belden to establish VPN connections. For more details refer to “Modicon Controller Systems Cybersecurity, User Guide”: https://www.se.com/ww/en/download/document/EIO0000001999/ • Ensure the M340 CPU is running with the memory protection activated by configuring the input bit to a physical input, for more details refer to the following guideline “Modicon Controller Systems Cybersecurity, User Guide” chapter “Controler Memory Protection”: https://www.se.com/ww/en/download/document/EIO0000001999/
https://www.se.com/ww/en/download/document/31007131K01000/ - MitigationModicon M340 CPU Firmware Versions prior to SV3.65 installed on Modicon M340 CPU Controller (part numbers BMXP34*)
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit:• Setup network segmentation and implement a firewall to block all unauthorized access to port 502/TCP • Configure the Access Control List following the recommendations of the user manuals: “Modicon M340 for Ethernet Communications Modules and Processors User Manual” chapter “Messaging Configuration Parameters”: https://www.se.com/ww/en/download/document/31007131K01000/ • Consider use of external firewall devices such as EAGLE40-07 from Belden to establish VPN connections. For more details refer to “Modicon Controller Systems Cybersecurity, User Guide”: https://www.se.com/ww/en/download/document/EIO0000001999/ • Ensure the M340 CPU is running with the memory protection activated by configuring the input bit to a physical input, for more details refer to the following guideline “Modicon Controller Systems Cybersecurity, User Guide” chapter “Controler Memory Protection”: https://www.se.com/ww/en/download/document/EIO0000001999/
https://www.se.com/ww/en/download/document/31007131K01000/ - MitigationModicon M340 CPU Firmware Versions prior to SV3.65 installed on Modicon M340 CPU Controller (part numbers BMXP34*)
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit:• Setup network segmentation and implement a firewall to block all unauthorized access to port 502/TCP • Configure the Access Control List following the recommendations of the user manuals: “Modicon M340 for Ethernet Communications Modules and Processors User Manual” chapter “Messaging Configuration Parameters”: https://www.se.com/ww/en/download/document/31007131K01000/ • Consider use of external firewall devices such as EAGLE40-07 from Belden to establish VPN connections. For more details refer to “Modicon Controller Systems Cybersecurity, User Guide”: https://www.se.com/ww/en/download/document/EIO0000001999/ • Ensure the M340 CPU is running with the memory protection activated by configuring the input bit to a physical input, for more details refer to the following guideline “Modicon Controller Systems Cybersecurity, User Guide” chapter “Controler Memory Protection”: https://www.se.com/ww/en/download/document/EIO0000001999/
https://www.se.com/ww/en/download/document/31007131K01000/ - MitigationModicon MC80 Firmware Versions prior to SV2.1 installed on Modicon MC80 Controller (part numbers BMKC80)
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit:• Setup network segmentation and implement a firewall to block all unauthorized access to port 502/TCP • Configure the Access Control List following the recommendations of the user manuals: “MC80 Programmable Logic Controller(PLC), User Manual” in the section “Access Control List (ACL)”: https://www.se.com/ww/en/download/document/EIO0000002071/ • Consider use of external firewall devices such as EAGLE40-07 from Belden to establish VPN connections. For more details refer to “Modicon Controller Systems Cybersecurity, User Guide”: https://www.se.com/ww/en/download/document/EIO0000001999/
https://www.se.com/ww/en/download/document/EIO0000002071/ - MitigationModicon MC80 Firmware Versions prior to SV2.1 installed on Modicon MC80 Controller (part numbers BMKC80)
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit:• Setup network segmentation and implement a firewall to block all unauthorized access to port 502/TCP • Configure the Access Control List following the recommendations of the user manuals: “MC80 Programmable Logic Controller(PLC), User Manual” in the section “Access Control List (ACL)”: https://www.se.com/ww/en/download/document/EIO0000002071/ • Consider use of external firewall devices such as EAGLE40-07 from Belden to establish VPN connections. For more details refer to “Modicon Controller Systems Cybersecurity, User Guide”: https://www.se.com/ww/en/download/document/EIO0000001999/
https://www.se.com/ww/en/download/document/EIO0000002071/ - MitigationModicon Momentum Unity M1E Processor Firmware Versions prior to SV2.80 installed on Modicon Momentum Unity M1E Processor Controller (171CBU*)
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit:• Setup network segmentation and implement a firewall to block all unauthorized access to port 502/TCP • Configure the Access Control List following the recommendations of the user manuals: “Momentum for EcoStruxure™ Control Expert -171CBU78090, 171CBU98090, 171CBU98091 Processors, User Guide” in the section “Controlling Access”:https://www.se.com/ww/en/download/document/HRB44124/• Consider use of external firewall devices such as EAGLE40-07 from Belden to establish VPN connections. For more details refer to “Modicon Controller Systems Cybersecurity, User Guide”:https://www.se.com/ww/en/download/document/EIO0000001999/
https://www.se.com/ww/en/download/document/HRB44124/ - MitigationModicon Momentum Unity M1E Processor Firmware Versions prior to SV2.80 installed on Modicon Momentum Unity M1E Processor Controller (171CBU*)
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit:• Setup network segmentation and implement a firewall to block all unauthorized access to port 502/TCP • Configure the Access Control List following the recommendations of the user manuals: “Momentum for EcoStruxure™ Control Expert -171CBU78090, 171CBU98090, 171CBU98091 Processors, User Guide” in the section “Controlling Access”:https://www.se.com/ww/en/download/document/HRB44124/• Consider use of external firewall devices such as EAGLE40-07 from Belden to establish VPN connections. For more details refer to “Modicon Controller Systems Cybersecurity, User Guide”:https://www.se.com/ww/en/download/document/EIO0000001999/
https://www.se.com/ww/en/download/document/HRB44124/ - BehobenModicon M340 CPU Firmware Versions prior to SV3.65 installed on Modicon M340 CPU Controller (part numbers BMXP34*)
Version SV3.65 of Modicon M340 firmware includes a fix for these vulnerabilities and is available for download here: https://www.se.com/ww/en/product-range/1468- modicon-m340
https://www.se.com/ww/en/product-range/1468-modicon-m340 - BehobenModicon M340 CPU Firmware Versions prior to SV3.65 installed on Modicon M340 CPU Controller (part numbers BMXP34*)
Version SV3.65 of Modicon M340 firmware includes a fix for these vulnerabilities and is available for download here: https://www.se.com/ww/en/product-range/1468- modicon-m340
https://www.se.com/ww/en/product-range/1468-modicon-m340 - BehobenModicon M340 CPU Firmware Versions prior to SV3.65 installed on Modicon M340 CPU Controller (part numbers BMXP34*)
Version SV3.65 of Modicon M340 firmware includes a fix for these vulnerabilities and is available for download here: https://www.se.com/ww/en/product-range/1468- modicon-m340
https://www.se.com/ww/en/product-range/1468-modicon-m340 - BehobenModicon MC80 Firmware Versions prior to SV2.1 installed on Modicon MC80 Controller (part numbers BMKC80)
Version SV2.1 of Modicon MC80 firmware includes a fix for these vulnerabilities and is available for download here: https://www.se.com/ww/en/product-range/62396-modicon-mc80
https://www.se.com/ww/en/product-range/62396-modicon-mc80 - BehobenModicon MC80 Firmware Versions prior to SV2.1 installed on Modicon MC80 Controller (part numbers BMKC80)
Version SV2.1 of Modicon MC80 firmware includes a fix for these vulnerabilities and is available for download here: https://www.se.com/ww/en/product-range/62396-modicon-mc80
https://www.se.com/ww/en/product-range/62396-modicon-mc80 - BehobenModicon Momentum Unity M1E Processor Firmware Versions prior to SV2.80 installed on Modicon Momentum Unity M1E Processor Controller (171CBU*)
Version SV2.80 of Modicon Momentum firmware includes a fix for these vulnerabilities and is available for download here: https://www.se.com/ww/en/product-range/535-modicon-momentum
https://www.se.com/ww/en/product-range/535-modicon-momentum - BehobenModicon Momentum Unity M1E Processor Firmware Versions prior to SV2.80 installed on Modicon Momentum Unity M1E Processor Controller (171CBU*)
Version SV2.80 of Modicon Momentum firmware includes a fix for these vulnerabilities and is available for download here: https://www.se.com/ww/en/product-range/535-modicon-momentum
https://www.se.com/ww/en/product-range/535-modicon-momentum
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan