[Control systems] Schneider Electric security advisory (AV23-480)

Serial number: AV23-480
Date: August 15, 2023

On August 15, 2023, CISA published an ICS advisory to address a vulnerability VulnerabilityA flaw or weakness in the design or implementation of an information system or its environment that could be exploited to adversely affect an organization's assets or operations. in the following products:

  • EcoStruxure Control Expert - all versions
  • EcoStruxure Process Expert - version V2020 and prior
  • Modicon M340 CPU (part numbers BMXP34*) - all versions
  • Modicon M580 CPU (part numbers BMEP* and BMEH*) - all versions
  • Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) - all versions
  • Modicon Momentum Unity M1E Processor (171CBU*) - all versions
  • Modicon MC80 (BMKC80) - all versions

The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates.

Date modified: