SEVD-2025-014-01 Modicon M580 PLCs, BMENOR2200H and EVLink Pro AC Security Notification

Schneider Electric is aware of a vulnerability in its Modicon M580 PLCs (Programmable Logic Controllers), BMENOR2200H and EVLink Pro AC products. Failure to apply the fix or mitigations provided below may risk buffer overflow attack, which could result in Denial-of-Service. CVE-2024-11425. CWE-131: Incorrect Calculation of Buffer Size vulnerability. Security Notification. Security Advisory.