← Back to Feed

Schneider Electric Modicon M340 Controller and Communication Modules

September 17, 2026 · CISA (US-CERT) · Severity: HIGH

View CSAF Summary Schneider Electric is aware of a vulnerability in its Modicon M340 https://www.se.com/ww/en/product-range/1468-modicon-m340-pac/, BMXNOR0200H https://www.se.com/us/en/product/BMXNOR0200H/communication-module-modicon-m340-iec-608705101-104-dnp3-for-severe-environments/: Modicon M340 X80 Ethernet Communication Modules, BMXNGD0100 https://www.se.com/us/en/product/BMXNGD0100/communication-module-modicon-m580-global-data-service/: M580 Global Data module, BMXNOC0401 https://www.se.com/us/en/product/BMXNOC0401/network-module-modicon-m340-ethernet-ip-and-modbus-tcp-4-x-rj45/?pageType=product&sourceId=BMXNOC0401: Modicon M340 X80 Ethernet Communication modules, BMXNOE0100 https://www.se.com/ww/en/product/BMXNOE0100/network-module-modicon-m340-modbus-tcp-1-x-rj45-flash-memory-card/?pageType=product&sourceId=BMXNOE0100: Modbus/TCP Ethernet Modicon M340 module, BMXNOE0110 https://www.se.com/ww/en/product/BMXNOE0110/ethernet-tcp-ip-network-module-modicon-m340-automation-platform-flash-memory-card-internal-ram-16-mb-1-x-rj45-10-100/: Modbus/TCP Ethernet Modicon M340 FactoryCast module product(s). Failure to apply the fix provided below may risk Denial Of Service attack, which could result in the unavailability of the devices. The following versions of Schneider Electric Modicon M340 Controller and Communication Modules are affected: Schneider Electric Ethernet/Serial RTU Module: vers:generic/<SV1.7_IR27 Schneider Electric M580 Global Data module: vers:all/* Schneider Electric Ethernet / Serial RTU Module: vers:all/* Schneider Electric Modbus/TCP Ethernet Modicon M340 module: vers:intdot/<3.60 Schneider Electric Modbus/TCP Ethernet Modicon M340 FactoryCast module: vers:intdot/<6.80 Schneider Electric Modicon M340 Firmware Versions prior to SV3.70 installed on Modicon M340 Controller: All versions CVSS Vendor Equipment Vulnerabilities v3 7.5 Schneider Electric Schneider Electric Modicon M340 Controller and Communication...

Key Takeaways

  • Schneider Electric products including NetBotz, Modicon M340, and PowerChute contain security vulnerabilities that could impact industrial control and building management systems.
  • The breadth of affected Schneider Electric products demonstrates the challenge of securing diverse OT product portfolios across industrial and facility management environments.
  • Organizations using Schneider Electric equipment should review the specific CVEs and apply available patches while monitoring for signs of exploitation in their OT environments.
☕ Buy a Coffee