CVE-2023-6408: High severity schneider electric modicon m340 bmxp341000 firmware vulnerability
Published Feb 14, 2024
·Updated
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause a denial of service and loss of confidentiality, integrity of controllers when conducting a Man in the Middle attack.
Affected Software
90 affected components
All of the following
Schneider-electric Modicon M340 Bmxp341000 Firmware<3.60
Schneider-electric Modicon M340 Bmxp341000
All of the following
Schneider-electric Modicon M340 Bmxp341000h Firmware<3.60
Schneider-electric Modicon M340 Bmxp341000h
All of the following
Schneider-electric Modicon M340 Bmxp342000 Firmware<3.60
Schneider-electric Modicon M340 Bmxp342000
All of the following
Schneider-electric Modicon M340 Bmxp342010 Firmware<3.60
Schneider-electric Modicon M340 Bmxp342010
All of the following
Schneider-electric Modicon M340 Bmxp3420102 Firmware<3.60
Schneider-electric Modicon M340 Bmxp3420102
All of the following
Schneider-electric Modicon M340 Bmxp3420102cl Firmware<3.60
Schneider-electric Modicon M340 Bmxp3420102cl
All of the following
Schneider-electric Modicon M340 Bmxp342020 Firmware<3.60
Schneider-electric Modicon M340 Bmxp342020
All of the following
Schneider-electric Modicon M340 Bmxp342020h Firmware<3.60
Schneider-electric Modicon M340 Bmxp342020h
All of the following
Schneider-electric Modicon M340 Bmxp342030 Firmware<3.60
Schneider-electric Modicon M340 Bmxp342030
All of the following
Schneider-electric Modicon M340 Bmxp3420302 Firmware<3.60
Schneider-electric Modicon M340 Bmxp3420302
All of the following
Schneider-electric Modicon M340 Bmxp3420302cl Firmware<3.60
Schneider-electric Modicon M340 Bmxp3420302cl
All of the following
Schneider-electric Modicon M340 Bmxp3420302h Firmware<3.60
Schneider-electric Modicon M340 Bmxp3420302h
All of the following
Schneider-electric Modicon M340 Bmxp342030h Firmware<3.60
Schneider-electric Modicon M340 Bmxp342030h
All of the following
Schneider-electric Modicon M580 Bmep581020 Firmware<4.20
Schneider-electric Modicon M580 Bmep581020
All of the following
Schneider-electric Modicon M580 Bmep581020h Firmware<4.20
Schneider-electric Modicon M580 Bmep581020h
All of the following
Schneider-electric Modicon M580 Bmep582020 Firmware<4.20
Schneider-electric Modicon M580 Bmep582020
All of the following
Schneider-electric Modicon M580 Bmep582020h Firmware<4.20
Schneider-electric Modicon M580 Bmep582020h
All of the following
Schneider-electric Modicon M580 Bmep582040 Firmware<4.20
Schneider-electric Modicon M580 Bmep582040
All of the following
Schneider-electric Modicon M580 Bmep582040h Firmware<4.20
Schneider-electric Modicon M580 Bmep582040h
All of the following
Schneider-electric Modicon M580 Bmep582040s Firmware<4.21
Schneider-electric Modicon M580 Bmep582040s
All of the following
Schneider-electric Modicon M580 Bmep583020 Firmware<4.20
Schneider-electric Modicon M580 Bmep583020
All of the following
Schneider-electric Modicon M580 Bmep583040 Firmware<4.20
Schneider-electric Modicon M580 Bmep583040
All of the following
Schneider-electric Modicon M580 Bmep584040 Firmware<4.20
Schneider-electric Modicon M580 Bmep584040
All of the following
Schneider-electric Modicon M580 Bmep584020 Firmware<4.20
Schneider-electric Modicon M580 Bmep584020
All of the following
Schneider-electric Modicon M580 Bmep584040s Firmware<4.21
Schneider-electric Modicon M580 Bmep584040s
All of the following
Schneider-electric Modicon M580 Bmep585040 Firmware<4.20
Schneider-electric Modicon M580 Bmep585040
All of the following
Schneider-electric Modicon M580 Bmep585040c Firmware<4.20
Schneider-electric Modicon M580 Bmep585040c
All of the following
Schneider-electric Modicon M580 Bmep586040 Firmware<4.20
Schneider-electric Modicon M580 Bmep586040
All of the following
Schneider-electric Modicon M580 Bmep586040c Firmware<4.20
Schneider-electric Modicon M580 Bmep586040c
All of the following
Schneider-electric Modicon M580 Bmeh582040 Firmware<4.20
Schneider-electric Modicon M580 Bmeh582040
All of the following
Schneider-electric Modicon M580 Bmeh582040c Firmware<4.20
Schneider-electric Modicon M580 Bmeh582040c
All of the following
Schneider-electric Modicon M580 Bmeh584040 Firmware<4.20
Schneider-electric Modicon M580 Bmeh584040
All of the following
Schneider-electric Modicon M580 Bmeh582040s Firmware<4.21
Schneider-electric Modicon M580 Bmeh582040s
All of the following
Schneider-electric Modicon M580 Bmeh584040c Firmware<4.20
Schneider-electric Modicon M580 Bmeh584040c
All of the following
Schneider-electric Modicon M580 Bmeh584040s Firmware<4.21
Schneider-electric Modicon M580 Bmeh584040s
All of the following
Schneider-electric Modicon M580 Bmeh586040 Firmware<4.20
Schneider-electric Modicon M580 Bmeh586040
All of the following
Schneider-electric Modicon M580 Bmeh586040c Firmware<4.20
Schneider-electric Modicon M580 Bmeh586040c
All of the following
Schneider-electric Modicon M580 Bmeh586040s Firmware<4.21
Schneider-electric Modicon M580 Bmeh586040s
All of the following
Schneider-electric Modicon Mc80 Bmkc8020301 Firmware
Schneider-electric Modicon Mc80 Bmkc8020301
All of the following
Schneider-electric Modicon Mc80 Bmkc8020310 Firmware
Schneider-electric Modicon Mc80 Bmkc8020310
All of the following
Schneider-electric Modicon Mc80 Bmkc8030311
Schneider-electric Modicon Mc80 Bmkc8030311 Firmware
All of the following
Schneider-electric Modicon Momentum 171cbu78090 Firmware
Schneider-electric Modicon Momentum 171cbu78090
All of the following
Schneider-electric Modicon Momentum 171cbu98090 Firmware
Schneider-electric Modicon Momentum 171cbu98090
All of the following
Schneider-electric Modicon Momentum 171cbu98091 Firmware
Schneider-electric Modicon Momentum 171cbu98091
Schneider-electric Ecostruxure Control Expert<16.0
Schneider-electric Ecostruxure Process Expert<2023
Event History
Feb 14, 2024
CVE Published
via MITRE·04:52 PM
Data Sourced
via MITRE·04:52 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-6408?
CVE-2023-6408 is considered to have a high severity due to its potential to cause denial of service and compromise the confidentiality and integrity of controllers.
2
How do I fix CVE-2023-6408?
To fix CVE-2023-6408, it is recommended to update the affected Schneider Electric Modicon firmware to versions higher than 3.60 or 4.20 as applicable.
3
What types of devices are affected by CVE-2023-6408?
CVE-2023-6408 affects several models of Schneider Electric Modicon controllers, including Modicon M340 and Modicon M580 with specific firmware versions.
4
What could happen if CVE-2023-6408 is exploited?
Exploiting CVE-2023-6408 could allow an attacker to conduct a Man in the Middle attack, leading to loss of service and data integrity.
5
Is there a workaround for CVE-2023-6408?
Currently, no official workarounds have been provided for CVE-2023-6408 other than applying the recommended firmware updates.