CISA + vendors
ICS Advisories
Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.
1
Found
Advisory data: live connection— last retrieved: 7 November 2026 at 16:54.
Filters
1 active1 advisories found
SEVD-2024-317-02
Modicon Controllers M340 / Momentum / MC80 & EcoStruxure™ Control Expert
Published
12 November 2024
Last update
8 September 2026
Linked CVEs
Affected sectors
Risk evaluation
Schneider Electric is aware of multiple vulnerabilities in its Modicon Controllers M340 / Momentum / MC80 / EcoStruxure™ Control Expert products. [Modicon PAC](https://www.se.com/ww/en/product-subcategory/3950-pac-programmable-automation-controllers/?filter=business-1-industrial-automation-and-control) products control and monitor industrial operations. [EcoStruxure™ Control Expert](https://www.se.com/ww/en/product-range/548-ecostruxure-control-expert-unity-pro/#overview) is the engineering application for Modicon Controllers. Failure to apply the provided remediations/mitigations below may risk unauthorized access to the controller, which could result in the possibility of denial of service and loss of confidentiality, integrity of the controller.
Mitigation summary
Firmware SV2.90 includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/product-range/535-modicon-momentum/#software-and-firmware Important: Customer needs to use version of EcoStruxure™ Control Expert v16.2 HF003 minimum to connect with the latest version of Modicon Momentum.
Revision history (3)
Initial publication — 12 November 2024
Original Release
Update A — 14 April 2026
EcoStruxure™ Control Expert is added as affected offer and remediations are available for Modicon M340, EcoStruxure™ Control Expert, Modicon Momentum.
Update B — 8 September 2026
Remediation is available for Modicon MC80.