[Control systems] Schneider Electric security advisory (AV23-480)

Serial number: AV23-480
Date: August 15, 2023

On August 15, 2023, CISA published an ICS advisory to address a vulnerability in the following products:

  • EcoStruxure Control Expert - all versions
  • EcoStruxure Process Expert - version V2020 and prior
  • Modicon M340 CPU (part numbers BMXP34*) - all versions
  • Modicon M580 CPU (part numbers BMEP* and BMEH*) - all versions
  • Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) - all versions
  • Modicon Momentum Unity M1E Processor (171CBU*) - all versions
  • Modicon MC80 (BMKC80) - all versions

The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates.

Date modified: