Improper check for unusual conditions in Schneider Electric Modicon M340 CPU
Priority MEDIUM 40CWE-754Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when communicating over the Modbus TCP protocol.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00621 50th percentileScored 2026-11-07
Fix Fixed Modicon M580 CPU (part numbers BMEP* and BMEH*) (Schneider Electric): V4.10
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Schneider Electric | Modicon M340 CPU (part numbers BMXP34*) | prior to SV3.51 | — | No fix listed | CNA |
| Schneider Electric | Modicon M580 CPU (part numbers BMEP* and BMEH*) | before V4.10 | V4.10 | Patch available | CNA |
| Schneider Electric | Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) | All | — | No fix listed | CNA |
| Schneider Electric | Modicon Momentum Unity M1E Processor (171CBU*) | All | — | No fix listed | CNA |
| Schneider Electric | Modicon MC80 (BMKC80) | All | — | No fix listed | CNA |
| Schneider Electric | Legacy Modicon Quantum (140CPU65*) | All | — | No fix listed | CNA |
| Schneider Electric | Legacy Modicon Premium CPUs (TSXP57*) | All | — | No fix listed | CNA |
- Modicon M340 CPU (part numbers BMXP34*) VendorSchneider Electric Affected prior to SV3.51 Fixed in — No fix listed CNA
- Modicon M580 CPU (part numbers BMEP* and BMEH*) VendorSchneider Electric Affected before V4.10 Fixed in V4.10 Patch available CNA
- Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) VendorSchneider Electric Affected All Fixed in — No fix listed CNA
- Modicon Momentum Unity M1E Processor (171CBU*) VendorSchneider Electric Affected All Fixed in — No fix listed CNA
- Modicon MC80 (BMKC80) VendorSchneider Electric Affected All Fixed in — No fix listed CNA
- Legacy Modicon Quantum (140CPU65*) VendorSchneider Electric Affected All Fixed in — No fix listed CNA
- Legacy Modicon Premium CPUs (TSXP57*) VendorSchneider Electric Affected All Fixed in — No fix listed CNA
CPE configurations NVD · 14
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:schneider-electric:modicon_m580_firmware:*:*:*:*:*:*:*:* | before 4.10 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:modicon_m580:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:modicon_m340_firmware:*:*:*:*:*:*:*:* | before 3.51 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:modicon_m340:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:modicon_momentum_unity_m1e_processor_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:modicon_momentum_unity_m1e_processor:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:modicon_mc80_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:modicon_mc80:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:tsxp57_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:tsxp57:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
- cpe:2.3:o:schneider-electric:modicon_m580_firmware:*:*:*:*:*:*:*:* Versions before 4.10 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:modicon_m580:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:modicon_m340_firmware:*:*:*:*:*:*:*:* Versions before 3.51 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:modicon_m340:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:modicon_momentum_unity_m1e_processor_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:modicon_momentum_unity_m1e_processor:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:modicon_mc80_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:modicon_mc80:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:tsxp57_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:tsxp57:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
Show 4 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:schneider-electric:bmep58s_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:bmep58s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:bmeh58s_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:bmeh58s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
- cpe:2.3:o:schneider-electric:bmep58s_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:bmep58s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:bmeh58s_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:bmeh58s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
Remediation
- Fix · CNA Modicon M580 CPU (part numbers BMEP* and BMEH*) (Schneider Electric) Fixed in V4.10
Timeline
- 2026-10-02 Threatist record created from CVE-2023-25619
- 2026-10-03 Alias added: GHSA-j5wq-fj8p-rh45
- 2026-11-07 EPSS moved to the 50th–90th percentile
References
More Schneider Electric Bmeh58s Firmware vulnerabilities
- TI-2023-10920 Improper check for unusual conditions in Schneider Electric Modicon M340 CPU CVSS 3.1MEDIUM 6.5
Sources
- CVE-2023-25619 · CVE Program
- CVE-2023-25619 · NVD
- FIRST EPSS
- GHSA-j5wq-fj8p-rh45 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences