IM
IronMonkey Threat Research
‹ Back to ICS Advisories

SEVD-2023-010-05 — EcoStruxure™ Control Expert, EcoStruxure™ Process Expert and Modicon PLCs and PACs

HIGH
CVSS 7.5
Date 2026-10-16T20:34:02+00:00
Source schneider-electric
Published by Schneider Electric

// Description

# Schneider Electric Security Notification 10-Jan-23 (13-Aug-24) Document Reference Number – SEVD-2023-010-05 v6.0.0 Page 1 of 11 # EcoStruxure™ Control Expert, EcoStruxure™ Process Expert and Modicon PLCs and PACs 10 January 2023 (13 August 2024) # Overview Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ Control Expert , EcoStruxure™ Process Expert and Modicon PLCs (Programmable Logic Controllers) and PACs (Programmable Automation Controllers). Modicon PLCs and PACs control and monitor industrial operations. EcoStruxure™ Control Expert is the common programming, debugging and operating software for Modicon PLCs and PACs. EcoStruxure™ Process Expert DCS is a single automation system to engineer, operate, and maintain an entire plant Infrastructure. Failure to apply the remediations provided below may risk unauthorized access to your PLC, which could result in the possibility of denial of service and loss of confidentiality, integrity of the controller. August 2024 Update: A remediation is available for the Modicon M580 CPU Safety (page 2). # Affected Products and Versions Product Version EcoStruxure™ Control Expert Versions prior to V15.3 EcoStruxure™ Process Expert All versions Modicon M340 CPU (part numbers BMXP34*) Version prior to SV3.51 Modicon M580 CPU (part numbers BMEP* and BMEH*) Versions prior to SV4.10 Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) Versions prior to SV4.21 Modicon Momentum Unity M1E Processor (171CBU*) Versions prior to SV2.6 Modicon MC80 (BMKC80*) Versions prior to SV1.90 Legacy Modicon Quantum (140CPU65*) and Premium CPUs (TSXP57*) All versions Schneider Electric Security Notification 10-Jan-23 (13-Aug-24) Document Reference Number – SEVD-2023-010-05 v6.0.0 Page 2 of 11 # Vulnerability Details CVE ID: CVE-2022-45788 CVSS v3.1 Base Score 7.5 | High | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

// Vulnerabilities (1)

CVE ID CVSS Score Severity Description
CVE-2022-45788 7.5 high
The affected components contain a vulnerability that could cause arbitrary code execution, a denial-of-service condition, and loss of confidentiality & integrity when a malicious project file is loaded onto the controller.

// Affected Products (8)

Vendor Product Asset Type Purdue Level Firmware
Schneider Electric Schneider Electric Modicon MC80 CPU (part numbers BMKC80*) plc
L1
--
Schneider Electric Schneider Electric EcoStruxure Process Expert engineering_workstation
L3
--
Schneider Electric Schneider Electric Modicon M580 CPU (part numbers BMEP* and BMEH*) plc
L1
--
Schneider Electric Schneider Electric Modicon Momentum Unity M1E Processor (part numbers 171CBU*) plc
L1
--
Schneider Electric Schneider Electric EcoStruxure Control Expert engineering_workstation
L3
--
Schneider Electric Schneider Electric Legacy Modicon Quantum (part numbers 140CPU65*) and Premium CPUs (part numbers TSXP57*) plc
L1
--
Schneider Electric Schneider Electric Modicon M340 CPU (part numbers BMXP34*) plc
L1
--
Schneider Electric Schneider Electric Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) plc
L1
--

// Remediations (11)

Patch: Modicon M580 CPU (part numbers BMEP* and BMEH*): Firmware SV4.10 includes a fix for this vulnerabili
Modicon M580 CPU (part numbers BMEP* and BMEH*): Firmware SV4.10 includes a fix for this vulnerability and is available for download.
Mitigation: For more information, see Schneider Electric's security advisory SEVD-2023-010-05.
For more information, see Schneider Electric's security advisory SEVD-2023-010-05.
Mitigation: Users should contact Schneider Electric for assistance in removing a patch.
Users should contact Schneider Electric for assistance in removing a patch.
Patch: EcoStruxure Process Expert: Version V2021 available for download and is not impacted by this vulnera
EcoStruxure Process Expert: Version V2021 available for download and is not impacted by this vulnerability as the affected component has been removed from this version.
Patch: Modicon M340 CPU (part numbers BMXP34*): Firmware SV3.51 includes a fix for this vulnerability and i
Modicon M340 CPU (part numbers BMXP34*): Firmware SV3.51 includes a fix for this vulnerability and is available for download.
Mitigation: Users should apply the best practices for network hardening as documented in the product user guide
Users should apply the best practices for network hardening as documented in the product user guide and the Schneider Electric Recommended Cybersecurity Best Practices.
Mitigation: Users should use appropriate patching methodologies when applying these patches to their systems. Sc
Users should use appropriate patching methodologies when applying these patches to their systems. Schneider Electric recommends using backups and evaluating the impact of these patches in a "testing and development environment" or on an offline infrastructure.
Patch: Modicon Momentum Unity M1E Processor (part numbers 171CBU*): Firmware VS2.6 includes a fix for this
Modicon Momentum Unity M1E Processor (part numbers 171CBU*): Firmware VS2.6 includes a fix for this vulnerability and is available for download.
Mitigation: Schneider Electric has released the following remediations for users to implement:
Schneider Electric has released the following remediations for users to implement:
Patch: EcoStruxure Control Expert: Software V15.3 includes a fix for this vulnerability and is available fo
EcoStruxure Control Expert: Software V15.3 includes a fix for this vulnerability and is available for download.
Patch: Modicon MC80 CPU (part numbers BMKC80*): Firmware SV1.90 includes a fix for this vulnerability and i
Modicon MC80 CPU (part numbers BMKC80*): Firmware SV1.90 includes a fix for this vulnerability and is available for download.

// References