Vulnerabilities fixed in Schneider Electric Modicon

🗓️ 16 Jan 2025 11:46:16Reported by NCSCType

Schneider Electric fixed Modicon M340 and M580 vulnerabilities; updates released; production access required; risk: denial of service or data access.

Reporter	Title	Published	Views	Family All 24
BDU FSTEC	The vulnerability of the microprogramming software of Schneider Electric’s programmable logic controller Modicon M340 and its network modules BMXNOE0100, BMXNOE0110, and BMXNOR0200H lies in the insufficient protection of operational data. This allows unauthorized access by intruders to read, modify, or delete data, or to cause malfunctions in the system.	3 Jun 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogrammed software used in Modicon M580 programmable logic controllers and the EVLink Pro AC charging stations relates to incorrect calculations of the size of the allocated buffer. This vulnerability allows a intruder to cause malfunctions in the equipment.	21 Jan 202500:00	–	bdu_fstec
Circl	CVE-2024-11425	17 Jan 202509:04	–	circl
Circl	CVE-2024-12142	17 Jan 202510:22	–	circl
CNNVD	Schneider Electric Modicon M580 安全漏洞	17 Jan 202500:00	–	cnnvd
CNNVD	Schneider Electric Modicon M340 信息泄露漏洞	17 Jan 202500:00	–	cnnvd
CVE	CVE-2024-11425	17 Jan 202509:00	–	cve
CVE	CVE-2024-12142	17 Jan 202510:19	–	cve
Cvelist	CVE-2024-11425	17 Jan 202509:00	–	cvelist
Cvelist	CVE-2024-12142	17 Jan 202510:19	–	cvelist