SEVD-2023-192-02 — For More Information

# Schneider Electric Security Notification > 11-Jul-23 (13-Aug-24) Document Reference Number – SEVD-2023-192-02 (v2.0.0) Page 1 of 4 EcoStruxure™ OPC UA Server Expert, Modicon Communication Server 11 July 2023 (13 August 2024) # Overview Schneider Electric is aware of a vulnerability in its EcoStruxure™ OPC UA Server Expert product. EcoStruxure™ OPC UA Server Expert is a communications platform seamlessly linking Schneider Electric PLCs and connected devices to enterprise information systems and the Industrial Internet of Things (IIoT) via the OPC Foundation’s Open Platform Communications – Unified Architecture (OPC UA) service-oriented architecture standard. Modicon Communication Server manages the communication configuration between Modicon PAC controllers (M340, M580) and Wonderware System Platform. The server embeds the capabilities of the EcoStruxure™ OPC Server Expert (for Modicon Controllers only) to make all the variables selected for the HMI available within the supervision. Failure to apply the remediation provided below may risk confidentiality, which could result in disclosure of sensitive information from the system running the software. August 2024 Update: Modicon Communication Server offer was added to the Affected Products and Versions table and a remediation is now available on Modicon Communication Server (page 2). # Affected Products and Versions Product Version EcoStruxure™ OPC UA Server Expert Versions prior to SV2.01 SP2 Modicon Communication Server Versions prior to SV2.01 SP2 # Vulnerability Details CVE ID: CVE-2023-37200