Risk Scores
CVSS v3.1
8.100000381469727
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.15%
34.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| schneider-electric | modicon_m580_bmep581020h_firmware | 0 |
| schneider-electric | modicon_mc80_bmkc8030311 | |
| schneider-electric | modicon_m340_bmxp3420302h_firmware | 0 |
| Schneider Electric | Modicon M580 CPU (part numbers BMEP* and BMEH*, excluding M580 CPU Safety) | Versions prior to sv4.20 |
| Schneider Electric | N/A | |
| schneider-electric | modicon_m340_bmxp342030h_firmware | 0 |
| schneider-electric | modicon_m580_bmeh584040_firmware | 0 |
| schneider-electric | modicon_m580_bmep584040s_firmware | 0 |
| schneider-electric | modicon_m340_bmxp342030h_firmware | 0 |
| schneider-electric | modicon_m340_bmxp342010_firmware | 0 |
| schneider-electric | modicon_m580_bmeh582040s_firmware | 0 |
| schneider-electric | modicon_mc80_bmkc8020301_firmware | |
| Schneider Electric | EcoStruxure Process Expert | Versions prior to v2023 |
| schneider-electric | modicon_m580_bmeh584040c_firmware | 0 |
| schneider-electric | modicon_m340_bmxp341000h_firmware | 0 |
| schneider-electric | modicon_m580_bmeh586040s_firmware | 0 |
| schneider-electric | modicon_m580_bmep583020_firmware | 0 |
| schneider-electric | modicon_m580_bmeh586040c_firmware | 0 |
| schneider-electric | modicon_m580_bmeh582040_firmware | 0 |
| schneider-electric | modicon_m340_bmxp341000_firmware | 0 |
…and 37 more
Timeline
- Feb 13, 2024 CVE Published
- Feb 15, 2024 EPSS Score
- Mar 6, 2024 PoC Published
- Mar 12, 2024 EPSS Score
- Apr 8, 2024 EPSS Score
- May 4, 2024 EPSS Score
- May 31, 2024 EPSS Score
- Jun 26, 2024 EPSS Score
- Jul 23, 2024 EPSS Score
- Aug 18, 2024 EPSS Score
- Sep 14, 2024 EPSS Score
- Oct 5, 2024 Coalition ESS Score
References
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-044-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-044-01.pdf url
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-044-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-044-03.pdf advisory
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2019-134-11&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2019-134-11_Modicon_Controllers_Security_Notification.pdf advisory
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-044-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-044-02.pdf advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-6408 advisory