CISA + vendors
ICS Advisories
Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.
1
Found
Advisory data: live connection— last retrieved: 7 November 2026 at 22:36.
Filters
1 active1 advisories found
SEVD-2025-014-05
Web Server on Modicon M340, Modbus/TCP Ethernet Modicon M340 module, Modbus/TCP Ethernet Modicon M340 FactoryCast module and Ethernet / Serial RTU communication modules
Risk evaluation
Schneider Electric is aware of a vulnerability in its Web Server on Modicon M340 and BMXNOE0100/0110, BMXNOR0200H communication modules products. The Modicon M340 is a programmable automation controller; BMXNOE0100 and BMXNOE0110 are network communication modules used with Modicon M340. BMXNOR0200H is a communication module that enables M580 and M340 platforms to use RTU protocol exchange with RTU stations. Failure to apply the remediation/mitigations provided below may risk information disclosure on web pages, modification of web pages and denial of serviceClick or tap here to enter text., which could result in the unavailability of the controllers or modules. August Update: Remediations are available for BMXNOE0100 (Modbus/TCP Ethernet Modicon M340 module) and BMXNOE0110 (Modbus/TCP Ethernet Modicon M340 FactoryCast module)
Mitigation summary
Version SV1.70IR26 of BMXNOR0200H includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/product/BMXNOR0200H/ethernet-serial-rtu-module-2-x-rj45/
Revision history (3)
Initial publication — 14 January 2025
Original Release
Update A — 12 August 2025
Remediations are available for BMXNOE0100 (Modbus/TCP Ethernet Modicon M340 module) and BMXNOE0110 (Modbus/TCP Ethernet Modicon M340 FactoryCast module)
Update B — 14 April 2026
Remediation is available for Modicon M340