Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

Multiple Schneider Electric Modicon M340 Ethernet Modules Remote Denial of Service

Medium

Synopsis

A Schneider Electric Modicon M340 Programmable Logic Controller (PLC) Ethernet module containing a remote denial of service vulnerability has been detected.

Description

Certain Schneider Electric Modicon M340 Programmable Logic Controller (PLC) Ethernet modules contain a vulnerability that allows remote, authenticated users to crash the Ethernet module via specially crafted FTP traffic. This vulnerability has been demonstrated using the FileZilla FTP client. Affected M340 Ethernet modules are the BMXNOE0100, BMXNOE0110, and BMXP342020.

Solution

Per the vendor's advisory, upgrade the M340 Ethernet module firmware to version 2.0 or later.