Number: AV22-444
Date: 9 August 2022
On 9 August 2022, Schneider Electric published Security Advisories to address vulnerabilities in multiple products. Included were updates for the following:
- EcoStruxure Control Expert – multiple versions and platforms
- EcoStruxure Process Expert – multiple versions and platforms
- Legacy Modicon Quantum/Premium – all versions
- Modicon M340 CPU – version V3.40 and prior
- Modicon M580 CPU – version V3.22 and prior
- Modicon MC80 (BMKC80) – all versions
- Modicon Momentum MDI (171CBU) – all versions
The Cyber Centre encourages users and administrators to review the provided web links, perform the suggested mitigations and apply the necessary updates.