Description
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause a denial of service and loss of confidentiality, integrity of controllers when conducting a Man in the Middle attack.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Schneider Electric Modicon M340 CPU (part numbers BMXP34*)
Default version status: unaffected
Versions prior to sv3.60affected
Schneider Electric Modicon M580 CPU (part numbers BMEP* and BMEH*, excluding M580 CPU Safety)
Default version status: unaffected
Versions prior to sv4.20affected
Schneider Electric Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S)
Default version status: unaffected
All Versionsaffected
Schneider Electric EcoStruxure Control Expert
Default version status: unaffected
Versions prior to v16.0affected
Schneider Electric EcoStruxure Process Expert
Default version status: unaffected
Versions prior to v2023affected