Improper check for unusual conditions in Schneider Electric Modicon M340 CPU
Priority LOW 30CWE-754Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when a malicious project file is loaded onto the controller by an authenticated user.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00587 48th percentileScored 2026-11-07
Fix Fixed Modicon M580 CPU (part numbers BMEP* and BMEH*) (Schneider Electric): V4.10
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Schneider Electric | Modicon M340 CPU (part numbers BMXP34*) | prior to SV3.51 | — | No fix listed | CNA |
| Schneider Electric | Modicon M580 CPU (part numbers BMEP* and BMEH*) | before V4.10 | V4.10 | Patch available | CNA |
| Schneider Electric | Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) | All | — | No fix listed | CNA |
| Schneider Electric | Modicon Momentum Unity M1E Processor (171CBU*) | All | — | No fix listed | CNA |
| Schneider Electric | Modicon MC80 (BMKC80) | All | — | No fix listed | CNA |
| Schneider Electric | Legacy Modicon Quantum (140CPU65*) | All | — | No fix listed | CNA |
| Schneider Electric | Legacy Modicon Premium CPUs (TSXP57*) | All | — | No fix listed | CNA |
- Modicon M340 CPU (part numbers BMXP34*) VendorSchneider Electric Affected prior to SV3.51 Fixed in — No fix listed CNA
- Modicon M580 CPU (part numbers BMEP* and BMEH*) VendorSchneider Electric Affected before V4.10 Fixed in V4.10 Patch available CNA
- Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) VendorSchneider Electric Affected All Fixed in — No fix listed CNA
- Modicon Momentum Unity M1E Processor (171CBU*) VendorSchneider Electric Affected All Fixed in — No fix listed CNA
- Modicon MC80 (BMKC80) VendorSchneider Electric Affected All Fixed in — No fix listed CNA
- Legacy Modicon Quantum (140CPU65*) VendorSchneider Electric Affected All Fixed in — No fix listed CNA
- Legacy Modicon Premium CPUs (TSXP57*) VendorSchneider Electric Affected All Fixed in — No fix listed CNA
CPE configurations NVD · 16
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:schneider-electric:modicon_m580_firmware:*:*:*:*:*:*:*:* | before 4.10 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:modicon_m580:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:modicon_m340_firmware:*:*:*:*:*:*:*:* | before 3.51 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:modicon_m340:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:modicon_momentum_unity_m1e_processor_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:modicon_momentum_unity_m1e_processor:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:modicon_mc80_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:modicon_mc80:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:140cpu65_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:140cpu65:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
- cpe:2.3:o:schneider-electric:modicon_m580_firmware:*:*:*:*:*:*:*:* Versions before 4.10 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:modicon_m580:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:modicon_m340_firmware:*:*:*:*:*:*:*:* Versions before 3.51 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:modicon_m340:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:modicon_momentum_unity_m1e_processor_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:modicon_momentum_unity_m1e_processor:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:modicon_mc80_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:modicon_mc80:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:140cpu65_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:140cpu65:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
Show 6 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:schneider-electric:tsxp57_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:tsxp57:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:bmep58s_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:bmep58s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:bmeh58s_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:bmeh58s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
- cpe:2.3:o:schneider-electric:tsxp57_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:tsxp57:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:bmep58s_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:bmep58s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:bmeh58s_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:bmeh58s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
Remediation
- Fix · CNA Modicon M580 CPU (part numbers BMEP* and BMEH*) (Schneider Electric) Fixed in V4.10
Timeline
- 2026-10-02 Threatist record created from CVE-2023-25620
- 2026-10-03 Alias added: GHSA-jp8p-mv2j-qxc2
References
More Schneider Electric 140cpu65 Firmware vulnerabilities
- TI-2020-06057 Cross-site request forgery in Modicon M340 CPUs: BMXP34 , Modicon Quantum CPUs with… CVSS 3.1HIGH 8.8
Sources
- CVE-2023-25620 · CVE Program
- CVE-2023-25620 · NVD
- FIRST EPSS
- GHSA-jp8p-mv2j-qxc2 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences