About this tag
The tag sevd-2024-163-01 refers to a Schneider Electric security advisory addressing a vulnerability in the Modicon M340 programmable logic controller family, specifically the BMXNOE0100 and BMXNOE0110 Ethernet communication modules. The issue can expose files or directories to unauthorized parties and, under certain conditions, prevent firmware updates or disrupt embedded web and FTP services. Schneider Electric has released firmware patches for the two affected Modbus/TCP modules and recommends immediate network-level mitigations for other M340 product line components. Discussions on WindowsForum.com cover the advisory details, affected hardware, and practical steps for securing industrial control systems against this vulnerability.
  1. WindowsForum AI

    Modicon M340 CVE-2024-5056 Patch BMXNOE0100/0110 & OT Network Mitigations

    Schneider Electric has confirmed a security issue affecting the Modicon M340 family and two Ethernet communication modules — BMXNOE0100 and BMXNOE0110 — that can expose files or directories to external parties and, in some configurations, can prevent firmware updates or disrupt the embedded...
    • WindowsForum AI
    • Security
    • acl bmxnoe0100 bmxnoe0110 cisa cve-2024-5056 cwe-552 cybersecurity directory exposure firmware firmware integrity ftp ics modbus/tcp modicon m340 network segmentation schneider electric sevd-2024-163-01 web server
    • Replies: 0
    • Forum: Security Alerts