CWE-924: Improper Enforcement of Message Integrity During Transmission in a
Communication Channel vulnerability exists that could cause a denial of service and loss of
confidentiality, integrity of controllers when conducting a Man in the Middle attack.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Modicon M340 CPU (part numbers BMXP34*)
Vendor
Schneider Electric
Product
Modicon M340 CPU (part numbers BMXP34*)
Platforms
Unknown
Default status
unaffected
Modicon M340 CPU (part numbers BMXP34*) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Versions prior to sv3.60
affected
Unavailable
Unavailable
Unavailable
None listed
Modicon M580 CPU (part numbers BMEP* and BMEH*, excluding M580 CPU Safety)
Vendor
Schneider Electric
Product
Modicon M580 CPU (part numbers BMEP* and BMEH*, excluding M580 CPU Safety)
Platforms
Unknown
Default status
unaffected
Modicon M580 CPU (part numbers BMEP* and BMEH*, excluding M580 CPU Safety) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Versions prior to sv4.20
affected
Unavailable
Unavailable
Unavailable
None listed
Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S)
Vendor
Schneider Electric
Product
Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S)
Platforms
Unknown
Default status
unaffected
Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All Versions
affected
Unavailable
Unavailable
Unavailable
None listed
EcoStruxure Control Expert
Vendor
Schneider Electric
Product
EcoStruxure Control Expert
Platforms
Unknown
Default status
unaffected
EcoStruxure Control Expert · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Versions prior to v16.0
affected
Unavailable
Unavailable
Unavailable
None listed
EcoStruxure Process Expert
Vendor
Schneider Electric
Product
EcoStruxure Process Expert
Platforms
Unknown
Default status
unaffected
EcoStruxure Process Expert · Scoped product and version facts