CVE-2023-6408

Published: Feb 14, 2024Modified: Jun 17, 2026

8.1

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.2 / Impact: 5.9

Source: NVD

Description

CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause a denial of service and loss of confidentiality, integrity of controllers when conducting a Man in the Middle attack.

Affected (46)

Schneider Electric

46 products

Modicon M340 Bmxp341000 Firmware

Modicon M340 Bmxp341000h Firmware

Modicon M340 Bmxp342000 Firmware

Modicon M340 Bmxp342010 Firmware

Modicon M340 Bmxp3420102 Firmware

Modicon M340 Bmxp3420102cl Firmware

Modicon M340 Bmxp342020 Firmware

Modicon M340 Bmxp342020h Firmware

Modicon M340 Bmxp342030 Firmware

Modicon M340 Bmxp3420302 Firmware

Modicon M340 Bmxp3420302cl Firmware

Modicon M340 Bmxp3420302h Firmware

Modicon M340 Bmxp342030h Firmware

Modicon M580 Bmep581020 Firmware

Modicon M580 Bmep581020h Firmware

Modicon M580 Bmep582020 Firmware

Modicon M580 Bmep582020h Firmware

Modicon M580 Bmep582040 Firmware

Modicon M580 Bmep582040h Firmware

Modicon M580 Bmep582040s Firmware

Modicon M580 Bmep583020 Firmware

Modicon M580 Bmep583040 Firmware

Modicon M580 Bmep584040 Firmware

Modicon M580 Bmep584020 Firmware

Modicon M580 Bmep584040s Firmware

Modicon M580 Bmep585040 Firmware

Modicon M580 Bmep585040c Firmware

Modicon M580 Bmep586040 Firmware

Modicon M580 Bmep586040c Firmware

Modicon M580 Bmeh582040 Firmware

Modicon M580 Bmeh582040c Firmware

Modicon M580 Bmeh584040 Firmware

Modicon M580 Bmeh582040s Firmware

Modicon M580 Bmeh584040c Firmware

Modicon M580 Bmeh584040s Firmware

Modicon M580 Bmeh586040 Firmware

Modicon M580 Bmeh586040c Firmware

Modicon M580 Bmeh586040s Firmware

Modicon Mc80 Bmkc8020301 Firmware

Modicon Mc80 Bmkc8020310 Firmware

Modicon Mc80 Bmkc8030311

Modicon Momentum 171cbu78090 Firmware

Modicon Momentum 171cbu98090 Firmware

Modicon Momentum 171cbu98091 Firmware

Ecostruxure Control Expert

Ecostruxure Process Expert

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp341000 Firmware	Before 3.60

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp341000	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp341000h Firmware	Before 3.60

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp341000h	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp342000 Firmware	Before 3.60

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp342000	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp342010 Firmware	Before 3.60

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp342010	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp3420102 Firmware	Before 3.60

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp3420102	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp3420102cl Firmware	Before 3.60

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp3420102cl	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp342020 Firmware	Before 3.60

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp342020	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp342020h Firmware	Before 3.60

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp342020h	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp342030 Firmware	Before 3.60

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp342030	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp3420302 Firmware	Before 3.60

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp3420302	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp3420302cl Firmware	Before 3.60

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp3420302cl	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp3420302h Firmware	Before 3.60

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp3420302h	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp342030h Firmware	Before 3.60

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp342030h	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep581020 Firmware	Before 4.20

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep581020	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep581020h Firmware	Before 4.20

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep581020h	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep582020 Firmware	Before 4.20

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep582020	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep582020h Firmware	Before 4.20

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep582020h	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep582040 Firmware	Before 4.20

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep582040	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep582040h Firmware	Before 4.20

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep582040h	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep582040s Firmware	Before 4.21

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep582040s	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep583020 Firmware	Before 4.20

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep583020	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep583040 Firmware	Before 4.20

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep583040	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep584040 Firmware	Before 4.20

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep584040	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep584020 Firmware	Before 4.20

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep584020	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep584040s Firmware	Before 4.21

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep584040s	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep585040 Firmware	Before 4.20

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep585040	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep585040c Firmware	Before 4.20

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep585040c	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep586040 Firmware	Before 4.20

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep586040	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep586040c Firmware	Before 4.20

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep586040c	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmeh582040 Firmware	Before 4.20

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmeh582040	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmeh582040c Firmware	Before 4.20

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmeh582040c	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmeh584040 Firmware	Before 4.20

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmeh584040	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmeh582040s Firmware	Before 4.21

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmeh582040s	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmeh584040c Firmware	Before 4.20

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmeh584040c	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmeh584040s Firmware	Before 4.21

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmeh584040s	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmeh586040 Firmware	Before 4.20

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmeh586040	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmeh586040c Firmware	Before 4.20

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmeh586040c	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmeh586040s Firmware	Before 4.21

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmeh586040s	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon Mc80 Bmkc8020301 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon Mc80 Bmkc8020301	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon Mc80 Bmkc8020310 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon Mc80 Bmkc8020310	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon Mc80 Bmkc8030311	All versions

Running on/with	Platform Versions
Schneider Electric Modicon Mc80 Bmkc8030311 Firmware	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon Momentum 171cbu78090 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon Momentum 171cbu78090	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon Momentum 171cbu98090 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon Momentum 171cbu98090	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon Momentum 171cbu98091 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon Momentum 171cbu98091	All versions

Configuration S

2 vulnerable

Vulnerable Software	Affected Versions
Schneider Electric Ecostruxure Control Expert	Before 16.0
Schneider Electric Ecostruxure Process Expert	Before 2023

Related CWEs

CWE-924

Improper Enforcement of Message Integrity During Transmission in a Communication Channel

The product establishes a communication channel with an endpoint and receives a message from that endpoint, but it does not sufficiently ensure that the message was not modified during transmission.

References (2)

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-044-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-044-01.pdf

Source: cybersecurity@se.com

Vendor Advisory

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-044-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-044-01.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.