Versions
All Modicon M340, Premium, Quantum PLCs and BMXNOR0200
Modicon M340
All Modicon M340, Premium, Quantum PLCs and BMXNOR0202
All versions of communication modules for Modicon Premium, Quantum, M340 and BMXNOR0200
Modicon Quantum
Modicon Premium (see security notification for specific versions)
All Modicon M340, Premium, Quantum PLCs and BMXNOR0201
Modicon M580
firmware version prior to V3.10
All Modicon M340, Premium, Quantum PLCs and BMXNOR0203
Recent CVEs
CVE-2018-7794
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service when reading data with invalid index using Modbus TCP.
CVE-2019-6857
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service of the controller when reading specific memory blocks using Modbus TCP.
CVE-2019-6856
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service when writing specific physical memory blocks using Modbus TCP.
CVE-2019-6809
A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware versions prior to V2.90), Modicon M340 (firmware versions prior to V3.10), Modicon Premium (all versions), Modicon Quantum (all versions), which could cause a possible denial of service when reading invalid data from the controller.