CVEvulnerability
CVE-2023-6408
8.1 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2024-02-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.1 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 8.1 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-924
Description
CWE-924: Improper Enforcement of Message Integrity During Transmission in a
Communication Channel vulnerability exists that could cause a denial of service and loss of
confidentiality, integrity of controllers when conducting a Man in the Middle attack.
Affected configurations
• schneider-electric modicon m340 bmxp341000 firmware (< 3.60)
• schneider-electric modicon m340 bmxp341000h firmware (< 3.60)
• schneider-electric modicon m340 bmxp342000 firmware (< 3.60)
• schneider-electric modicon m340 bmxp342010 firmware (< 3.60)
• schneider-electric modicon m340 bmxp3420102 firmware (< 3.60)
• schneider-electric modicon m340 bmxp3420102cl firmware (< 3.60)
• schneider-electric modicon m340 bmxp342020 firmware (< 3.60)
• schneider-electric modicon m340 bmxp342020h firmware (< 3.60)
• schneider-electric modicon m340 bmxp342030 firmware (< 3.60)
• schneider-electric modicon m340 bmxp3420302 firmware (< 3.60)
• schneider-electric modicon m340 bmxp3420302cl firmware (< 3.60)
• schneider-electric modicon m340 bmxp3420302h firmware (< 3.60)
• schneider-electric modicon m340 bmxp342030h firmware (< 3.60)
• schneider-electric modicon m580 bmep581020 firmware (< 4.20)
• schneider-electric modicon m580 bmep581020h firmware (< 4.20)
• schneider-electric modicon m580 bmep582020 firmware (< 4.20)
• schneider-electric modicon m580 bmep582020h firmware (< 4.20)
• schneider-electric modicon m580 bmep582040 firmware (< 4.20)
• schneider-electric modicon m580 bmep582040h firmware (< 4.20)
• schneider-electric modicon m580 bmep582040s firmware (< 4.21)
• schneider-electric modicon m580 bmep583020 firmware (< 4.20)
• schneider-electric modicon m580 bmep583040 firmware (< 4.20)
• schneider-electric modicon m580 bmep584040 firmware (< 4.20)
• schneider-electric modicon m580 bmep584020 firmware (< 4.20)
• schneider-electric modicon m580 bmep584040s firmware (< 4.21)
• schneider-electric modicon m580 bmep585040 firmware (< 4.20)
• schneider-electric modicon m580 bmep585040c firmware (< 4.20)
• schneider-electric modicon m580 bmep586040 firmware (< 4.20)
• schneider-electric modicon m580 bmep586040c firmware (< 4.20)
• schneider-electric modicon m580 bmeh582040 firmware (< 4.20)
• schneider-electric modicon m580 bmeh582040c firmware (< 4.20)
• schneider-electric modicon m580 bmeh584040 firmware (< 4.20)
• schneider-electric modicon m580 bmeh582040s firmware (< 4.21)
• schneider-electric modicon m580 bmeh584040c firmware (< 4.20)
• schneider-electric modicon m580 bmeh584040s firmware (< 4.21)
• schneider-electric modicon m580 bmeh586040 firmware (< 4.20)
• schneider-electric modicon m580 bmeh586040c firmware (< 4.20)
• schneider-electric modicon m580 bmeh586040s firmware (< 4.21)
• schneider-electric modicon mc80 bmkc8020301 firmware
• schneider-electric modicon mc80 bmkc8020310 firmware
• schneider-electric modicon mc80 bmkc8030311
• schneider-electric modicon momentum 171cbu78090 firmware
• schneider-electric modicon momentum 171cbu98090 firmware
• schneider-electric modicon momentum 171cbu98091 firmware
• schneider-electric ecostruxure control expert (< 16.0)
• schneider-electric ecostruxure process expert (< 2023)
Related
Weakness · CWE (1)
- CWE-924 Improper Enforcement of Message Integrity During Transmission in a Communication Channel weakness
References
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-044-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-044-01.pdf Vendor Advisory
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-044-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-044-01.pdf Vendor Advisory