A Schneider Electric Modicon M340 Programmable Logic Controller (PLC) Ethernet module containing a remote denial of service vulnerability has been detected.
Certain Schneider Electric Modicon M340 Programmable Logic Controller (PLC) Ethernet modules contain a vulnerability that allows remote, authenticated users to crash the Ethernet module via specially crafted FTP traffic. This vulnerability has been demonstrated using the FileZilla FTP client. Affected M340 Ethernet modules are the BMXNOE0100, BMXNOE0110, and BMXP342020.
Per the vendor's advisory, upgrade the M340 Ethernet module firmware to version 2.0 or later.