CVE-2025-6625

A vendor fix is available.

• FixedModbus/TCP Ethernet Modicon M340 FactoryCast modulecisa_csaf_ot

  Version 6.80 of BMXNOE0110 includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/product/BMXNOE0110/ethernettcp-ip-network-module-modicon-m340-automation-platformflash-memory-card-internal-ram-16-mb-1-x-rj45-10-100/ Reboot is needed to complete the firmware upgrade

  https://www.se.com/ww/en/product/BMXNOE0110/ethernet-tcp-ip-network-module-modicon-m340-automation-platform-flash-memory-card-internal-ram-16-mb-1-x-rj45-10-100/↗
• FixedModbus/TCP Ethernet Modicon M340 modulecisa_csaf_ot

  Version 3.60 of BMXNOE0100 includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/product/BMXNOE0100/networkmodule-modicon-m340-modbus-tcp-1-x-rj45-flash-memorycard/ Reboot is needed to complete the firmware upgrade

  https://www.se.com/ww/en/product/BMXNOE0100/network-module-modicon-m340-modbus-tcp-1-x-rj45-flash-memory-card/↗
• FixedModicon M340 Firmware Versions prior to SV3.70 installed on Modicon M340 Controllercisa_csaf_ot

  Version SV3.70 of Modicon M340 includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/product-range/1468-modicon-m340/#software-and-firmware

  https://www.se.com/ww/en/product-range/1468-modicon-m340/#software-and-firmware↗
• FixedEthernet / Serial RTU Modulecisa_csaf_ot

  Version SV1.7 IR27 of BMXNOR0200H includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/product/BMXNOR0200H/ethernet-serial-rtu-module-2-x-rj45/

  https://www.se.com/ww/en/product/BMXNOR0200H/ethernet-serial-rtu-module-2-x-rj45/↗
• MitigationEthernet / Serial RTU Modulecisa_csaf_ot

  Schneider Electric is establishing a remediation plan for all future versions of • Modicon M340 • BMXNOR0200H • BMXNGD0100 • BMXNOC401 We will update this document when the remediation is available. Until then, customers should immediately apply the following mitigations to reduce the risk of exploit: • FTP service is disabled by default • Ensure to disable FTP service when not in use • Setup network segmentation and implement a firewall to block all unauthorized access to ports 21/FTP • Use VPN (Virtual Private Networks) tunnels if remote access is required

• MitigationM580 Global Data modulecisa_csaf_ot

  Schneider Electric is establishing a remediation plan for all future versions of • Modicon M340 • BMXNOR0200H • BMXNGD0100 • BMXNOC401 We will update this document when the remediation is available. Until then, customers should immediately apply the following mitigations to reduce the risk of exploit: • FTP service is disabled by default • Ensure to disable FTP service when not in use • Setup network segmentation and implement a firewall to block all unauthorized access to ports 21/FTP • Use VPN (Virtual Private Networks) tunnels if remote access is required

• MitigationModbus/TCP Ethernet Modicon M340 FactoryCast modulecisa_csaf_ot

  If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: • FTP service is disabled by default • Ensure to disable FTP service when not in use • Setup network segmentation and implement a firewall to block all unauthorized access to ports 21/FTP • Use VPN (Virtual Private Networks) tunnels if remote access is required

• MitigationModbus/TCP Ethernet Modicon M340 modulecisa_csaf_ot

  If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: • FTP service is disabled by default • Ensure to disable FTP service when not in use • Setup network segmentation and implement a firewall to block all unauthorized access to ports 21/FTP • Use VPN (Virtual Private Networks) tunnels if remote access is required

• MitigationModicon M340 Firmware Versions prior to SV3.70 installed on Modicon M340 Controllercisa_csaf_ot

  If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: • FTP service is disabled by default • Ensure to disable FTP service when not in use • Setup network segmentation and implement a firewall to block all unauthorized access to ports 21/FTP • Use VPN (Virtual Private Networks) tunnels if remote access is required

• MitigationModicon M340 X80 Ethernet Communication modulescisa_csaf_ot

  Schneider Electric is establishing a remediation plan for all future versions of • Modicon M340 • BMXNOR0200H • BMXNGD0100 • BMXNOC401 We will update this document when the remediation is available. Until then, customers should immediately apply the following mitigations to reduce the risk of exploit: • FTP service is disabled by default • Ensure to disable FTP service when not in use • Setup network segmentation and implement a firewall to block all unauthorized access to ports 21/FTP • Use VPN (Virtual Private Networks) tunnels if remote access is required

• MitigationEthernet / Serial RTU Modulecisa_csaf_ot

  If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: • FTP service is disabled by default • Ensure to disable FTP service when not in use • Setup network segmentation and implement a firewall to block all unauthorized access to ports 21/FTP • Use VPN (Virtual Private Networks) tunnels if remote access is required