SEVD-2024-044-01 EcoStruxure Control Expert, EcoStruxure Process Expert and Modicon M340, M580 and M580 Safety PLCs Security Notification

Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ Control Expert , EcoStruxure™ Process Expert and Modicon M340, M580 PLCs (Programmable Logic Controllers). CVE-2023-6408 - CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel CVE-2023-6409 - CWE-798: Use of Hard-coded Credentials CVE-2023-27975 - CWE-522: Insufficiently Protected Credentials