CISA 2026-09-17

Schneider Electric Modicon M340 Controller and Communication Modules

CVE-2025-6625

Machine-generated analysis · WAYSCloud LLM

The advisory reports a denial-of-service vulnerability in Schneider Electric Modicon M340 controllers and several communication modules.

Context

The affected products include the Modicon M340 controller and communication modules such as BMXNOR0200H, BMXNGD0100, BMXNOC0401, BMXNOE0100, and BMXNOE0110. The advisory states that exploitation could render the devices unavailable via a DoS attack. Affected firmware versions are those prior to SV3.70 for the controller and specific version ranges for the modules as listed. The notice references a fix that must be applied to mitigate the risk.

Operator considerations

Check: inventory all Modicon M340 controllers and listed communication modules and verify firmware versions.
Isolate: place these devices on segmented networks and restrict access from untrusted sources.
Patch: apply the Schneider Electric fix referenced in the advisory.
Log: monitor for service interruptions or DoS-related alerts on the affected devices.

From Cybersecurity and Infrastructure Security Agency ↗

Schneider Electric is aware of a vulnerability in its Modicon M340 https://www.se.com/ww/en/product-range/1468-modicon-m340-pac/, BMXNOR0200H https://www.se.com/us/en/product/BMXNOR0200H/communication-module-modicon-m340-iec-608705101-104-dnp3-for-severe-environments/: Modicon M340 X80 Ethernet Communication Modules, BMXNGD0100 https://www.se.com/us/en/product/BMXNGD0100/communication-module-modicon-m580-global-data-service/: M580 Global Data module, BMXNOC0401 https://www.se.com/us/en/product/BMXNOC0401/network-module-modicon-m340-ethernet-ip-and-modbus-tcp-4-x-rj45/?pageType=product&sourceId=BMXNOC0401: Modicon M340 X80 Ethernet Communication modules, BMXNOE0100 https://www.se.com/ww/en/product/BMXNOE0100/network-module-modicon-m340-modbus-tcp-1-x-rj45-flash-memory-card/?pageType=product&sourceId=BMXNOE0100: Modbus/TCP Ethernet Modicon M340 module, BMXNOE0110 https://www.se.com/ww/e...

Read the full advisory on CISA →