Modicon PAC Controllers

# Schneider Electric Security Notification 9-Aug-22 (13-Aug-24) Document Reference Number – SEVD-2022 -221-02 v5.0.0 Page 1 of 7 ## Modicon PAC Controllers 9 August 2022 (13 August 2024) # Overview Schneider Electric is aware of a vulnerability in its Modicon PAC Controllers. Modicon PLCs (Programmable Logic Controllers) and PACs (Programmable Automation Controllers) control and monitor industrial operations in a sustainable, flexible, efficient, and protected way. Failure to apply the remediations provided below may risk memory related errors, which could result in Denial of Service of the controller when using Modbus TCP. August 2024 Update: A remediation is available for the Modicon M580 CPU Safety (page 2). # Affected Products and Versions Product Version Modicon M340 CPU (part numbers BMXP34*) V3.40 and prior Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) Versions prior to SV4.21 Modicon M580 CPU (part numbers BMEP* and BMEH*, excluding M580 CPU Safety) SV3.22 and prior Legacy Modicon Quantum/Premium All Versions Modicon Momentum Unity M1E processor (171CBU*) SV2.5 and prior Modicon MC80 (BMKC80) V1.7 and prior # Vulnerability Details CVE ID: CVE-2022-37301 CVSS v3.1 Base Score 7.5 | High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus TCP protocol. Schneider Electric Security Notification 9-Aug-22 (13-Aug-24) Document Reference Number – SEVD-2022 -221-02 v5.0.0 Page 2 of 7 # Remediation Affected Products Remediations Modicon Modicon M340 CPU (part numbers BMXP34*) v3.40 and prior Firmware v3.50 includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/download/document/BMXP34xxxxx_ SV_03.50/ Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) Versions prior to SV4.21