{}

Search FAQs

{"searchBar":{"inputPlaceholder":"Search by keyword or ask a question","searchBtn":"Search","error":"Please enter a keyword to search"}}

Important security notification – M340, Quantum and Premium Ethernet communication modules

Issue

Schneider Electric® has become aware of multiple vulnerabilities in the Ethernet modules for M340, Quantum, Premium PLC ranges, Momentum range and STB I/O.
For M340 PLC ranges

Product Line
Modicon M340, Quantum, Premium

Environment
BMXP342020


Resolution​​​​​

Schneider Electric® has become aware of multiple vulnerabilities in the Ethernet modules for M340, Quantum, Premium PLC ranges, Momentum range and STB I/O.
For M340 PLC ranges

The Ethernet modules crashes 50% of the time when using FileZilla as a FTP Client to transfer files to the modules.

For modules supporting Factory Cast feature for M340, Quantum, Premium PLC ranges
The FactoryCast service accessible to end users allows user to send Modbus messages embedded in HTTP POST requests using SOAP messages that can result in unintended consequences such as (1) stopping of PLCs, (2) Modifying IO data in PLC etc.

For modules for M340, Quantum, Premium PLC ranges
The Ethernet modules with Web Server feature allows user to transmit HTTP commands to modules when user clicks on maliciously formed hyperlinks. This Vulnerability is called Cross Site Forgery.

See the attached Document

Attachments

(Removed File URL: 208522_4E82/208522V7.pdf)(Removed Image URL: /PubResEXPORT.nsf/2b87ee90be777fc085257c28006ee4ef/cdfe79ea28c02703c1257b6d00109507/fl_block_5/0.CC?OpenElement&FieldElemFormat=gif)208522V7.pdf

Attachment(s)

208522V7.pdf208522V7.pdf [155.65 KB]
Users group

Discuss this topic with experts

Visit our Community for first-hand insights from experts and peers on this topic and more.
Explore more
{"support":{"yesButton":"yes","noButton":"no","feedback":{"title":"What can we do to improve?"},"submitButton":"Submit","successMessage":"Thank you for your feedback","title":"Did this answer your question?","feedbackPercentLabel":"of people found this helpful","captcha":{"error":"Please check the box"}}}
Explore more