As cited
Copy frozen at (site build).
vulnerabilities
Schneider Electric Modicon M340 Controller and Communication Modules
Schneider Electric disclosed CVE-2025-6625, an improper input validation vulnerability in Modicon M340 controllers and communication modules that could cause denial of service when a crafted FTP command is sent to affected devices. The vulnerability affects multiple communication and controller models with CVSS score 7.5. Vendor fixes are available for several product versions, with firmware updates addressing the flaw in Modbus/TCP modules (3.60 and 6.80) and the M340 controller (SV3.70), while mitigations include disabling FTP, network segmentation, and firewall rules blocking port 21.
Why it matters: Industrial control system operators running affected Modicon M340 platforms worldwide need to apply available firmware updates or implement network segmentation to prevent attackers from disabling critical manufacturing, energy, water, and chemical facility operations.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Schneider Electric Modicon M340 Controller and Communication Modules
Schneider Electric disclosed CVE-2025-6625, an improper input validation vulnerability in Modicon M340 controllers and communication modules that could cause denial of service when a crafted FTP command is sent to affected devices. Fixed versions are available for most affected products: BMXNOE0100 version 3.60, BMXNOE0110 version 6.80, Modicon M340 firmware SV3.70, and BMXNOR0200H version SV1.7 IR27. Organizations that cannot immediately patch should disable FTP service, implement network segmentation with firewall rules blocking port 21, and use virtual private network (VPN) tunnels for remote access.
Why it matters: Organizations running Modicon M340 controllers in critical infrastructure (chemical, manufacturing, energy, water) worldwide need to apply firmware patches or implement mitigations immediately to prevent denial of service attacks that could disrupt operations.
- Source published
- First seen by Cybersecurity Tracker