A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions), that could cause denial of service when a specially crafted Read Physical Memory request over Modbus is sent to the controller.

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions), that could cause denial of service when a specially crafted Read Physical Memory request over Modbus is sent to the controller.

Schneider Electric is aware of multiple vulnerabilities in its Modicon programmable automation controllers. The Modicon Ethernet Programmable Automation products are controllers for industrial process and infrastructure. Failure to apply the remediations provided below may risk a denial of service attack, which could result in making the device enter a non-recoverable fault state.