A CWE-200: Information Exposure vulnerability exists that could cause the exposure of sensitive information stored on the memory of the controller when communicating over the Modbus TCP protocol. Affected Products: Modicon M340 CPU (part numbers BMXP34*) (Versions prior to V3.30), Modicon M580 CPU (part numbers BMEP* and BMEH*) (Versions prior to SV3.20), Modicon MC80 (BMKC80) (Versions prior to V1.6), Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) (All Versions), Modicon Momentum MDI (171CBU*) (Versions prior to V2.3), Legacy Modicon Quantum (All Versions)
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Modicon M340 CPU (part numbers BMXP34*)
Vendor
Schneider Electric
Product
Modicon M340 CPU (part numbers BMXP34*)
Platforms
Unknown
Default status
Unknown
Modicon M340 CPU (part numbers BMXP34*) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All
affected
custom
V3.30
Unavailable
None listed
Modicon M580 CPU (part numbers BMEP* and BMEH*)
Vendor
Schneider Electric
Product
Modicon M580 CPU (part numbers BMEP* and BMEH*)
Platforms
Unknown
Default status
Unknown
Modicon M580 CPU (part numbers BMEP* and BMEH*) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All
affected
custom
V3.20
Unavailable
None listed
Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S)
Vendor
Schneider Electric
Product
Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S)
Platforms
Unknown
Default status
Unknown
Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All Versions
affected
Unavailable
Unavailable
Unavailable
None listed
Modicon MC80 (BMKC80)
Vendor
Schneider Electric
Product
Modicon MC80 (BMKC80)
Platforms
Unknown
Default status
Unknown
Modicon MC80 (BMKC80) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All
affected
custom
V1.6
Unavailable
None listed
Modicon Momentum CPU (171CBU*)
Vendor
Schneider Electric
Product
Modicon Momentum CPU (171CBU*)
Platforms
Unknown
Default status
Unknown
Modicon Momentum CPU (171CBU*) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All
affected
custom
V2.3
Unavailable
None listed
Legacy Modicon Quantum
Vendor
Schneider Electric
Product
Legacy Modicon Quantum
Platforms
Unknown
Default status
Unknown
Legacy Modicon Quantum · Scoped product and version facts