Modicon PAC Controllers

# Schneider Electric Security Notification 9-Aug-22 (13-Aug-24) Document Reference Number – SEVD-2022 -221-04 v5.0.0 Page 1 of 8 # Modicon PAC Controllers 9 August 2022 (13 August 2024) # Overview Schneider Electric is aware of a vulnerability in its Modicon PAC Controllers. Modicon PLCs (Programmable Logic Controllers) and PACs (Programmable Automation Controllers) control and monitor industrial operations in a sustainable, flexible, efficient and protected way. Failure to apply the remediations provided below may risk read access to memory content of the controllers, which could result in exposure of sensitive information such as application password hash and project data to the attacker. August 2024 Update: A remediation is available for the Modicon M580 CPU Safety (page 2). # Affected Products and Versions Product Version Modicon M340 CPU (part numbers BMXP34*) Versions prior to v3.40 Modicon M580 CPU (part numbers BMEP* and BMEH*, excluding M580 CPU Safety) Versions prior to v4.20 Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) Versions prior to SV4.21 Modicon MC80 (BMKC80) Versions prior to v1.70 Modicon Momentum CPU (171CBU*) Versions prior to v2.4 Legacy Modicon Quantum All versions # Vulnerability Details CVE ID: CVE-2021-22786 CVSS v3.1 Base Score 7.5 | High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CWE-200: Information Exposure vulnerability exists that could cause the exposure of sensitive information stored on the memory of the controller when communicating over the Modbus TCP protocol. Schneider Electric Security Notification 9-Aug-22 (13-Aug-24) Document Reference Number – SEVD-2022 -221-04 v5.0.0 Page 2 of 8 # Remediation Affected Products Remediations Modicon Modicon M340 CPU (part numbers BMXP34*) Versions prior to v3.40 Firmware v3.40 of Modicon includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/download/document/BMXP34xxxxx_SV_ xx.xx/