IM
IronMonkey Threat Research
‹ Back to ICS Advisories

SEVD-2025-014-01 — Modicon M580 PLCs, BMENOR2200H and EVLink Pro AC

HIGH
CVSS 7.5
Date 2026-10-16T20:32:20+00:00
Source schneider-electric
Published by Schneider Electric

// Description

# Schneider Electric Security Notification 14-Jan-25 (08-Apr-25) Document Reference Number – SEVD-2025-014-01 (v2.0.0) Page 1 of 5 > Public ## Modicon M580 PLCs, BMENOR2200H and EVLink Pro AC 14 January 2025 (8 April 2025) Overview Schneider Electric is aware of a vulnerability in its Modicon M580 PLCs (Programmable Logic Controllers), BMENOR2200H and EVLink Pro AC products. Modicon M580 PLCs control and monitor industrial operations. BMENOR2200H is an advanced RTU communication module for Modicon M580 PLCs. EVLink Pro AC is a 3rd generation of AC charging station. Failure to apply the fix or mitigations provided below may risk buffer overflow attack, which could result in Denial-of-Service. April 2025 Update: A remediation is now available for BMENOR2200H. Affected Products and Versions Product Version Modicon M580 CPU (part numbers BMEP* and BMEH*, excluding M580 CPU Safety) Versions prior to SV4.30 Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) Versions prior to SV4.21 BMENOR2200H Versions prior to SV4.02.01 EVLink Pro AC Versions prior to v1.3.10 Vulnerability Details CVE ID: CVE-2024-11425 CVSS v3.1 Base Score 7.5 | High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS v4.0 Base Score 8.7 | High | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CWE-131: Incorrect Calculation of Buffer Size vulnerability exists that could cause Denial-of-Service of the product when an unauthenticated user is sending a crafted HTTPS packet to the webserver. The severity of vulnerabilities was calculated using the CVSS Base metrics for 4.0 (CVSS v4.0). CVSS v3.1 will be still evaluated until the adoption of CVSS v4.0 by the industry. The severity was calculated without incorporating the Temporal and Environmental metrics. Schneider Electric recommends that customers score Schneider Electric Security Notification 14-Jan-25 (08-Apr-25) Document Reference Number – SEVD-2025-014-01 (v2.0.0) Page 2 of 5 > Public

// Vulnerabilities (1)

CVE ID CVSS Score Severity Description
CVE-2024-11425 7.5 high
CVE-2024-11425. CWE-131: Incorrect Calculation of Buffer Size vulnerability exists that could cause Denial-of-Service of the product when an unauthenticated user is sending a crafted HTTPS packet to the webserver.

// Affected Products (2)

Vendor Product Asset Type Purdue Level Firmware
Schneider Electric Schneider Electric Modicon M580 CPU (part numbers BMEP* and BMEH*, excluding M580 CPU Safety) plc
L1
SV4.20
Schneider Electric Schneider Electric Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) plc
L1
--

// Remediations (7)

Mitigation: • Follow EVlink Pro AC cybersecurity guide https://www.se.com/ww/en/download/document/GEX5261101/
• Follow EVlink Pro AC cybersecurity guide https://www.se.com/ww/en/download/document/GEX5261101/
Mitigation: If customers choose not to apply the remediation provided above, they should immediately apply the f
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit.• Setup network segmentation and implement a firewall to block all unauthorized access to port 443/TCP
Patch: SV4.02.01 of BMENOR2200H firmware includes a fix for this vulnerability and is available here: h
SV4.02.01 of BMENOR2200H firmware includes a fix for this vulnerability and is available here: https://www.se.com/ww/en/product/BMENOR2200H/communication-module-modicon-m580-iec-608705101-104-dnp3-for-severe-environments/
Mitigation: • Setup network segmentation and implement a firewall to block all unauthorized access to port 443
• Setup network segmentation and implement a firewall to block all unauthorized access to port 443/TCP • Configure the Access Control List following the recommendations of the user manuals: “Modicon M580, Hardware, Reference Manual”: https://www.se.com/ww/en/download/document/EIO0000001578/
Patch: V1.3.10 of EVLink Pro AC firmware includes a fix for this vulnerability and is available here: ht
V1.3.10 of EVLink Pro AC firmware includes a fix for this vulnerability and is available here: https://www.se.com/ww/en/product-range/23107242-evlink-pro-ac/#software-and-firmware
Patch: SV4.21 of Modicon M580 firmware includes a fix for this vulnerability and is available for downloa
SV4.21 of Modicon M580 firmware includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/product-range/62098-modicon-m580-epac/#software-and-firmware
Patch: SV4.30 of Modicon M580 firmware includes a fix for this vulnerability and is available for downloa
SV4.30 of Modicon M580 firmware includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/product-range/62098-modicon-m580-epac/#software-and-firmware

// References