Vulnerabilities fixed in Scheider Electric EcoStruxture and Modicon

🗓️ 15 Feb 2024 00:00:00Reported by NCSCType

ncsc

ncsc🔗 advisories.ncsc.nl👁 2 Views

Schneider Electric fixes EcoStruxture and Modicon vulnerabilities enabling DoS or security bypass.

Reporter	Title	Published	Views	Family All 36
BDU FSTEC	The vulnerabilities of the microprogramming software for Schneider Electric Modicon M340 CPU BMXP34, M580 CPU BMEP, M580 CPU BMEH, M580 CPU Safety BMEP58S, and M580 CPU Safety BMEH58S, as well as the programming tools EcoStruxure Control Expert and EcoStruxure Process Expert, allow a attacker to execute a “man-in-the-middle” attack.	13 Feb 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the programming tools for PLCs (programmable logic controllers), namely EcoStruxure Control Expert and EcoStruxure Process Expert, arises from the use of strictly encrypted audit data. This vulnerability allows a malicious individual to gain unauthorized access to the project file.	16 Apr 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the programming tools for programmable logic controllers (PLCs), EcoStruxure Control Expert and EcoStruxure Process Expert, arises from insufficient protection of registration data. This allows a malicious individual to gain unauthorized access to the project file.	16 Apr 202400:00	–	bdu_fstec
Circl	CVE-2023-27975	6 Mar 202417:46	–	circl
Circl	CVE-2023-6408	6 Mar 202417:16	–	circl
Circl	CVE-2023-6409	6 Mar 202417:46	–	circl
CNNVD	Schneider Electric Modicon M340 Trust Management Issue Vulnerability	14 Feb 202400:00	–	cnnvd
CNNVD	Schneider Electric Modicon M340 Security Breach	14 Feb 202400:00	–	cnnvd
CNNVD	Schneider Electric Modicon M340 Security Breach	14 Feb 202400:00	–	cnnvd
CVE	CVE-2023-27975	14 Feb 202416:55	–	cve

15 Feb 2024 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.18.1

EPSS0.00314

SSVC

EcoStruxture Modicon Vulnerabilities Denial of service Security bypass Production access Schneider Electric