← CVE Intelligence

CVE-2023-6408

Schneider Electric / Modicon M340 CPU (part numbers BMXP34*) PUBLISHED

Description (CNA)

CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause a denial of service and loss of confidentiality, integrity of controllers when conducting a Man in the Middle attack.

Affected (CNA)

Vendor / productVersions
Schneider Electric / Modicon M340 CPU (part numbers BMXP34*)affected Versions prior to sv3.60
Schneider Electric / Modicon M580 CPU (part numbers BMEP* and BMEH*, excluding M580 CPU Safety)affected Versions prior to sv4.20
Schneider Electric / Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S)affected All Versions
Schneider Electric / EcoStruxure Control Expertaffected Versions prior to v16.0
Schneider Electric / EcoStruxure Process Expertaffected Versions prior to v2023

CWE

CWE-924

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.