A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when a malicious project file is loaded onto the controller. Affected Products: EcoStruxure Control Expert (All Versions), EcoStruxure Process Expert (All Versions), Modicon M340 CPU - part numbers BMXP34* (All Versions), Modicon M580 CPU - part numbers BMEP* and BMEH* (All Versions), Modicon M580 CPU Safety - part numbers BMEP58*S and BMEH58*S (All Versions), Modicon Momentum Unity M1E Processor - 171CBU* (All Versions), Modicon MC80 - BMKC80 (All Versions), Legacy Modicon Quantum - 140CPU65* and Premium CPUs - TSXP57* (All Versions)
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
EcoStruxure Control Expert
Vendor
Schneider Electric
Product
EcoStruxure Control Expert
Platforms
Unknown
Default status
unaffected
EcoStruxure Control Expert · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All Versions
affected
Unavailable
Unavailable
Unavailable
None listed
EcoStruxure Process Expert
Vendor
Schneider Electric
Product
EcoStruxure Process Expert
Platforms
Unknown
Default status
unaffected
EcoStruxure Process Expert · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All Versions
affected
Unavailable
Unavailable
Unavailable
None listed
Modicon M340 CPU (part numbers BMXP34*)
Vendor
Schneider Electric
Product
Modicon M340 CPU (part numbers BMXP34*)
Platforms
Unknown
Default status
unaffected
Modicon M340 CPU (part numbers BMXP34*) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All Versions
affected
Unavailable
Unavailable
Unavailable
None listed
Modicon M580 CPU (part numbers BMEP* and BMEH*)
Vendor
Schneider Electric
Product
Modicon M580 CPU (part numbers BMEP* and BMEH*)
Platforms
Unknown
Default status
unaffected
Modicon M580 CPU (part numbers BMEP* and BMEH*) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All Versions
affected
Unavailable
Unavailable
Unavailable
None listed
Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S)
Vendor
Schneider Electric
Product
Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S)
Platforms
Unknown
Default status
unaffected
Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All Versions
affected
Unavailable
Unavailable
Unavailable
None listed
Modicon Momentum Unity M1E Processor (171CBU*)
Vendor
Schneider Electric
Product
Modicon Momentum Unity M1E Processor (171CBU*)
Platforms
Unknown
Default status
unaffected
Modicon Momentum Unity M1E Processor (171CBU*) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All Versions
affected
Unavailable
Unavailable
Unavailable
None listed
Modicon MC80 (BMKC80)
Vendor
Schneider Electric
Product
Modicon MC80 (BMKC80)
Platforms
Unknown
Default status
unaffected
Modicon MC80 (BMKC80) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All Versions
affected
Unavailable
Unavailable
Unavailable
None listed
Legacy Modicon Quantum (140CPU65*) and Premium CPUs (TSXP57*)
Vendor
Schneider Electric
Product
Legacy Modicon Quantum (140CPU65*) and Premium CPUs (TSXP57*)
Platforms
Unknown
Default status
unaffected
Legacy Modicon Quantum (140CPU65*) and Premium CPUs (TSXP57*) · Scoped product and version facts