SESB-2019-214-01
Vulnerability from csaf_se - Published: 2019-08-02 00:00 - Updated: 2022-09-13 00:00Summary
Wind River VxWorks Vulnerabilities (URGENT/11)
Notes
General Security Recommendations
We strongly recommend the following industry cybersecurity best practices.
https://www.se.com/us/en/download/document/7EN52-0390/
* Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network.
* Install physical controls so no unauthorized personnel can access your industrial control and safety systems, components, peripheral equipment, and networks.
* Place all controllers in locked cabinets and never leave them in the “Program” mode.
* Never connect programming software to any network other than the network intended for that device.
* Scan all methods of mobile data exchange with the isolated network such as CDs, USB drives, etc. before use in the terminals or any node connected to these networks.
* Never allow mobile devices that have connected to any other network besides the intended network to connect to the safety or control networks without proper sanitation.
* Minimize network exposure for all control system devices and systems and ensure that they are not accessible from the Internet.
* When remote access is required, use secure methods, such as Virtual Private Networks (VPNs). Recognize that VPNs may have vulnerabilities and should be updated to the most current version available. Also, understand that VPNs are only as secure as the connected devices.
For more information refer to the Schneider Electric Recommended Cybersecurity Best Practices document.
For More Information
This document provides an overview of the identified vulnerability or vulnerabilities and actions required to mitigate. For more details and assistance on how to protect your installation, contact your local Schneider Electric representative or Schneider Electric Industrial Cybersecurity Services: https://www.se.com/ww/en/work/solutions/cybersecurity/. These organizations will be fully aware of this situation and can support you through the process.
For further information related to cybersecurity in Schneider Electric’s products, visit the company’s cybersecurity support portal page: https://www.se.com/ww/en/work/support/cybersecurity/overview.jsp
LEGAL DISCLAIMER
THIS NOTIFICATION DOCUMENT, THE INFORMATION CONTAINED HEREIN, AND ANY MATERIALS LINKED FROM IT (COLLECTIVELY, THIS “NOTIFICATION”) ARE INTENDED TO HELP PROVIDE AN OVERVIEW OF THE IDENTIFIED SITUATION AND SUGGESTED MITIGATION ACTIONS, REMEDIATION, FIX, AND/OR GENERAL SECURITY RECOMMENDATIONS AND IS PROVIDED ON AN “AS-IS” BASIS WITHOUT WARRANTY OR GUARANTEE OF ANY KIND. SCHNEIDER ELECTRIC DISCLAIMS ALL WARRANTIES RELATING TO THIS NOTIFICATION, EITHER EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. SCHNEIDER ELECTRIC MAKES NO WARRANTY THAT THE NOTIFICATION WILL RESOLVE THE IDENTIFIED SITUATION. IN NO EVENT SHALL SCHNEIDER ELECTRIC BE LIABLE FOR ANY DAMAGES OR LOSSES WHATSOEVER IN CONNECTION WITH THIS NOTIFICATION, INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF SCHNEIDER ELECTRIC HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. YOUR USE OF THIS NOTIFICATION IS AT YOUR OWN RISK, AND YOU ARE SOLELY LIABLE FOR ANY DAMAGES TO YOUR SYSTEMS OR ASSETS OR OTHER LOSSES THAT MAY RESULT FROM YOUR USE OF THIS NOTIFICATION. SCHNEIDER ELECTRIC RESERVES THE RIGHT TO UPDATE OR CHANGE THIS NOTIFICATION AT ANY TIME AND IN ITS SOLE DISCRETION
About Schneider Electric
At Schneider, we believe access to energy and digital is a basic human right. We empower all to do more with less, ensuring Life Is On everywhere, for everyone, at every moment.
We provide energy and automation digital solutions for efficiency and sustainability. We combine world-leading energy technologies, real-time automation, software and services into integrated solutions for Homes, Buildings, Data Centers, Infrastructure and Industries.
We are committed to unleash the infinite possibilities of an open, global, innovative community that is passionate with our Meaningful Purpose, Inclusive and Empowered values.
www.se.com
Overview
Wind River's VxWorks TCP/IP Stack vulnerabilities have wide-ranging impact across multiple IT and
industrial applications. We are working closely with Wind River to understand and assess how these
vulnerabilities impact Schneider Electric offers and our customers’ operations. We downloaded Wind
River’s patches as soon as they were made available to us, and we have quickly instituted a
remediation plan to evolve all current and future products that rely on the Wind River platform to
embed these fixes.
We will continue to monitor and will respond further if new information becomes available. In the
meantime, customers should immediately make sure they have implemented cybersecurity best
practices across their operations to protect themselves from these vulnerabilities. Where appropriate
this includes locating your industrial systems and remotely accessible devices behind firewalls;
installing physical controls to prevent unauthorized access; and preventing mission-critical systems
and devices from being accessed from outside networks.
Please subscribe to the Schneider Electric security notification service to be informed of updates to
this disclosure, including details on affected products and remediations, as well as other important
security notifications:
https://www.schneider-electric.com/en/work/support/cybersecurity/security-notifications.jsp
For additional information and support, please contact your Schneider Electric sales or service
representative or Schneider Electric’s Customer Care Center.
Note: Schneider Electric is aware of a potential exploit available that targets the URGENT/11
vulnerabilities. Our customers should urgently consider applying the remediations or mitigations
detailed in this document.
September 2022 Update: CANopen X80 Communication Module (BMECXM0100) (page 2) and
Profibus Remote Master (TCSEGPA23F14F) (page 7) added to the list of affected products, along
with their final mitigations.
Details
Additional details on these specific vulnerabilities can be found on the Wind River security notification
webpage:
https://www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/
Of the 11 identified Wind River vulnerabilities, six have the potential to trigger remote code execution.
Four of those six can be mitigated by a specific firewall configuration, even if access to the device is
required. The other vulnerabilities can trigger denial of service conditions or information disclosure.
Important to note, not all vulnerabilities apply to all impacted versions.
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Public",
"tlp": {
"label": "WHITE"
}
},
"lang": "en-US",
"notes": [
{
"category": "general",
"text": "We strongly recommend the following industry cybersecurity best practices.\n\nhttps://www.se.com/us/en/download/document/7EN52-0390/\n* Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network.\n* Install physical controls so no unauthorized personnel can access your industrial control and safety systems, components, peripheral equipment, and networks.\n* Place all controllers in locked cabinets and never leave them in the \u201cProgram\u201d mode.\n* Never connect programming software to any network other than the network intended for that device.\n* Scan all methods of mobile data exchange with the isolated network such as CDs, USB drives, etc. before use in the terminals or any node connected to these networks.\n* Never allow mobile devices that have connected to any other network besides the intended network to connect to the safety or control networks without proper sanitation.\n* Minimize network exposure for all control system devices and systems and ensure that they are not accessible from the Internet.\n* When remote access is required, use secure methods, such as Virtual Private Networks (VPNs). Recognize that VPNs may have vulnerabilities and should be updated to the most current version available. Also, understand that VPNs are only as secure as the connected devices.\nFor more information refer to the Schneider Electric Recommended Cybersecurity Best Practices document. \n",
"title": "General Security Recommendations"
},
{
"category": "general",
"text": "This document provides an overview of the identified vulnerability or vulnerabilities and actions required to mitigate. For more details and assistance on how to protect your installation, contact your local Schneider Electric representative or Schneider Electric Industrial Cybersecurity Services: https://www.se.com/ww/en/work/solutions/cybersecurity/. These organizations will be fully aware of this situation and can support you through the process.\nFor further information related to cybersecurity in Schneider Electric\u2019s products, visit the company\u2019s cybersecurity support portal page: https://www.se.com/ww/en/work/support/cybersecurity/overview.jsp",
"title": "For More Information"
},
{
"category": "legal_disclaimer",
"text": "THIS NOTIFICATION DOCUMENT, THE INFORMATION CONTAINED HEREIN, AND ANY MATERIALS LINKED FROM IT (COLLECTIVELY, THIS \u201cNOTIFICATION\u201d) ARE INTENDED TO HELP PROVIDE AN OVERVIEW OF THE IDENTIFIED SITUATION AND SUGGESTED MITIGATION ACTIONS, REMEDIATION, FIX, AND/OR GENERAL SECURITY RECOMMENDATIONS AND IS PROVIDED ON AN \u201cAS-IS\u201d BASIS WITHOUT WARRANTY OR GUARANTEE OF ANY KIND. SCHNEIDER ELECTRIC DISCLAIMS ALL WARRANTIES RELATING TO THIS NOTIFICATION, EITHER EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. SCHNEIDER ELECTRIC MAKES NO WARRANTY THAT THE NOTIFICATION WILL RESOLVE THE IDENTIFIED SITUATION. IN NO EVENT SHALL SCHNEIDER ELECTRIC BE LIABLE FOR ANY DAMAGES OR LOSSES WHATSOEVER IN CONNECTION WITH THIS NOTIFICATION, INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF SCHNEIDER ELECTRIC HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. YOUR USE OF THIS NOTIFICATION IS AT YOUR OWN RISK, AND YOU ARE SOLELY LIABLE FOR ANY DAMAGES TO YOUR SYSTEMS OR ASSETS OR OTHER LOSSES THAT MAY RESULT FROM YOUR USE OF THIS NOTIFICATION. SCHNEIDER ELECTRIC RESERVES THE RIGHT TO UPDATE OR CHANGE THIS NOTIFICATION AT ANY TIME AND IN ITS SOLE DISCRETION",
"title": "LEGAL DISCLAIMER"
},
{
"category": "general",
"text": "At Schneider, we believe access to energy and digital is a basic human right. We empower all to do more with less, ensuring Life Is On everywhere, for everyone, at every moment.\n\nWe provide energy and automation digital solutions for efficiency and sustainability. We combine world-leading energy technologies, real-time automation, software and services into integrated solutions for Homes, Buildings, Data Centers, Infrastructure and Industries.\n\nWe are committed to unleash the infinite possibilities of an open, global, innovative community that is passionate with our Meaningful Purpose, Inclusive and Empowered values.\n\nwww.se.com ",
"title": "About Schneider Electric"
},
{
"category": "summary",
"text": "Wind River\u0027s VxWorks TCP/IP Stack vulnerabilities have wide-ranging impact across multiple IT and \r\nindustrial applications. We are working closely with Wind River to understand and assess how these \r\nvulnerabilities impact Schneider Electric offers and our customers\u2019 operations. We downloaded Wind \r\nRiver\u2019s patches as soon as they were made available to us, and we have quickly instituted a \r\nremediation plan to evolve all current and future products that rely on the Wind River platform to \r\nembed these fixes. \r\nWe will continue to monitor and will respond further if new information becomes available. In the \r\nmeantime, customers should immediately make sure they have implemented cybersecurity best \r\npractices across their operations to protect themselves from these vulnerabilities. Where appropriate \r\nthis includes locating your industrial systems and remotely accessible devices behind firewalls; \r\ninstalling physical controls to prevent unauthorized access; and preventing mission-critical systems \r\nand devices from being accessed from outside networks.\r\nPlease subscribe to the Schneider Electric security notification service to be informed of updates to \r\nthis disclosure, including details on affected products and remediations, as well as other important \r\nsecurity notifications:\r\nhttps://www.schneider-electric.com/en/work/support/cybersecurity/security-notifications.jsp\r\nFor additional information and support, please contact your Schneider Electric sales or service \r\nrepresentative or Schneider Electric\u2019s Customer Care Center. \r\nNote: Schneider Electric is aware of a potential exploit available that targets the URGENT/11 \r\nvulnerabilities. Our customers should urgently consider applying the remediations or mitigations\r\ndetailed in this document.\r\nSeptember 2022 Update: CANopen X80 Communication Module (BMECXM0100) (page 2) and \r\nProfibus Remote Master (TCSEGPA23F14F) (page 7) added to the list of affected products, along \r\nwith their final mitigations.",
"title": "Overview"
},
{
"category": "details",
"text": "Additional details on these specific vulnerabilities can be found on the Wind River security notification \nwebpage:\nhttps://www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/\nOf the 11 identified Wind River vulnerabilities, six have the potential to trigger remote code execution. \nFour of those six can be mitigated by a specific firewall configuration, even if access to the device is \nrequired. The other vulnerabilities can trigger denial of service conditions or information disclosure. \nImportant to note, not all vulnerabilities apply to all impacted versions.",
"title": "Details"
}
],
"publisher": {
"category": "vendor",
"contact_details": "cpcert@se.com",
"name": "Schneider Electric CPCERT",
"namespace": "https://www.se.com/ww/en/work/support/cybersecurity/security-notifications.jsp"
},
"references": [
{
"category": "self",
"summary": "Wind River VxWorks Vulnerabilities (URGENT/11) - SESB-2019-214-01 PDF Version",
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SESB-2019-214-01\u0026p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=SESB-2019-214-01.pdf"
},
{
"category": "self",
"summary": "Wind River VxWorks Vulnerabilities (URGENT/11) - SESB-2019-214-01 CSAF Version",
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SESB-2019-214-01\u0026p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=sesb-2019-214-01.json"
},
{
"category": "external",
"summary": "Recommended Cybersecurity Best Practices",
"url": "https://www.se.com/us/en/download/document/7EN52-0390/"
}
],
"title": "Wind River VxWorks Vulnerabilities (URGENT/11)",
"tracking": {
"current_release_date": "2022-09-13T00:00:00.000Z",
"generator": {
"date": "2025-05-12T00:00:00.000Z",
"engine": {
"name": "Schneider Electric CSAF Generator",
"version": "1.2"
}
},
"id": "SESB-2019-214-01",
"initial_release_date": "2019-08-02T00:00:00.000Z",
"revision_history": [
{
"date": "2019-08-02T09:35:42.000Z",
"number": "1.0.0",
"summary": "Original Release"
},
{
"date": "2019-08-07T09:35:42.000Z",
"number": "1.1.0",
"summary": "Added Modicon LMC078 Controller to list of affected products, and removed a \r\nduplicate product. "
},
{
"date": "2019-08-09T09:35:42.000Z",
"number": "1.2.0",
"summary": "Added SAGE RTU to list of affected products."
},
{
"date": "2019-08-19T09:35:42.000Z",
"number": "1.3.0",
"summary": "Removed Modicon M580 Ethernet / Serial RTU Module and added Modicon eX80 - \r\nBMEAHI0812 HART Analog Input Module to list of affected products. "
},
{
"date": "2019-08-29T09:35:42.000Z",
"number": "1.4.0",
"summary": "Updated affected versions for Easergy MiCOM C264 product."
},
{
"date": "2019-10-11T09:35:42.000Z",
"number": "2.0.0",
"summary": "- Exploit information added to Overview Section\r\n- Remediations added for SAGE RTU, Easergy MiCOM C264, and SCADAPack \r\n57x RTUs \r\n- Updated affected versions for Easergy MiCOM P40"
},
{
"date": "2019-10-17T09:35:42.000Z",
"number": "2.1.0",
"summary": "Updated affected versions for SCADAPack 57x RTUs and SAGE RTU under \r\nAvailable Remediations. "
},
{
"date": "2019-11-12T09:35:42.000Z",
"number": "2.2.0",
"summary": "Updated remediations for ConneXium Industrial Firewall, Easergy MiCOM C264\r\nController (page 2-3)\r\nEnhanced product list with additional details for Modicon X80 I/O modules. Added \r\nModicon Quantum Head 140 CRP, Modicon Momentum Unity, and removed \r\nTMSES4 Ethernet Module from affected products."
},
{
"date": "2019-11-13T09:35:42.000Z",
"number": "2.3.0",
"summary": "Updated remediations for Modicon M262 Logic/Motion Controller (page 3)"
},
{
"date": "2019-12-10T09:35:42.000Z",
"number": "2.4.0",
"summary": "Updated remediations for Modicon M580 Ethernet Communications Modules, \r\nModicon M580 ePAC CPUs including Safety CPUs, Easergy P5, ION7400, \r\nION9000, PM8000."
},
{
"date": "2020-01-14T09:35:42.000Z",
"number": "2.5.0",
"summary": "Updated remediations for Modicon X80 I/O modules, Modicon Momentum Unity, \r\nNanodac Recorder / Controller (added to affected products), SCADAPack 53xE \r\nRTUs, and Saitel DR with HU_A CPU."
},
{
"date": "2020-02-11T09:35:42.000Z",
"number": "2.6.0",
"summary": "Updated remediations for Modicon LMC078 Controller, Modicon M580 Ethernet \r\ncommunications Modules: Modicon M580 IEC 61850 - BMENOP0300 (C), Modicon \r\nMC80 Programmable Logic Controller, Modicon Quantum 140 NOP \r\nCommunications Module, PacDrive 3 Eco/Pro/Pro2 Motion Controllers, Pro-face HMI -GP4000H/R/E Series, GP4100 Compact Series, LT4000M Modular Series, \r\nGP4000E Series, IoT Gateway, SP5000 Series, and SP5000X Series, Easergy \r\nMiCOM Px40, and TeSys island.\r\n"
},
{
"date": "2020-03-11T09:35:42.000Z",
"number": "2.7.0",
"summary": "Updated remediations for HMIGXU, Easergy MiCOM P30, Tricon Communication \r\nModules, Trident Communication Integration Module."
},
{
"date": "2020-04-14T09:35:42.000Z",
"number": "2.8.0",
"summary": "Updated remediations for ION7400 MID and PM8000 MID."
},
{
"date": "2020-05-12T09:35:42.000Z",
"number": "2.9.0",
"summary": "Updated remediations for Modicon Network Option Switch, Modicon X80 - I/O Drop \r\nAdapters, Modicon Quantum 140 CRA, Modicon Quantum Head 140 CRP, and \r\nModicon Quantum Ethernet DIO network module - 140NOC78x00 (C), SCD6000 \r\nIndustrial RTU, Pro-face HMI -GP4000H/R/E Series."
},
{
"date": "2020-05-21T09:35:42.000Z",
"number": "2.10.0",
"summary": "Clarified \u201cAffected Version\u201d and \u201cRemediation\u201d version reference numbers for \r\nSCD6000 Industrial RTU product."
},
{
"date": "2020-06-09T09:35:42.000Z",
"number": "2.11.0",
"summary": "Updated remediations for Easergy T300 and Magelis HMI - HMIGTO Series, \r\nHMISCU Series, HMIGTUX Series, and HMIGTU Series (Except Open BOX)\r\nproducts."
},
{
"date": "2020-10-13T09:35:42.000Z",
"number": "2.12.0",
"summary": "Updated remediations for versadac\u2122 Scalable Data Recorder, E+PLC100 \r\nCombination PLC, and E+PLC400 Combination PLC products."
},
{
"date": "2021-05-11T09:35:42.000Z",
"number": "2.13.0",
"summary": "Updated remediations for Modicon M241 Micro PLC and Modicon M251 Micro \r\nPLC."
},
{
"date": "2022-09-13T09:35:42.000Z",
"number": "2.14.0",
"summary": "CANopen X80 Communication Module (BMECXM0100) (page 2) and Profibus \r\nRemote Master (TCSEGPA23F14F) (page 7) added to the list of affected products, \r\nalong with their final mitigations."
}
],
"status": "final",
"version": "2.14.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "Schneider Electric CANopen X80 Communication Module (BMECXM0100) All versions",
"product_id": "1",
"product_identification_helper": {
"model_numbers": [
"BMECXM0100"
]
}
}
}
],
"category": "product_name",
"name": "CANopen X80 Communication Module (BMECXM0100)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=5.33",
"product": {
"name": "Schneider Electric ConneXium Industrial Firewall/Router - TCSEFEC2CF3F21(MM/TX) - TCSEFEC23FCF21 (TX/MM) - TCSEFEC23F3F21 (TX/TX) V5.33 and prior",
"product_id": "2",
"product_identification_helper": {
"model_numbers": [
"TCSEFEC2CF3F21(MM/TX)",
"TCSEFEC23FCF21(TX/MM)",
"TCSEFEC23F3F21(TX/TX)"
]
}
}
}
],
"category": "product_name",
"name": "ConneXium Industrial Firewall/Router"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=5.24",
"product": {
"name": "Schneider Electric ConneXium Industrial Firewall- TCSEFEC2CF3F20 (MM/TX) - TCSEFEC23FCF20 (TX/MM)- TCSEFEC23F3F20 (TX/TX) version 5.24 and prior",
"product_id": "3",
"product_identification_helper": {
"model_numbers": [
"TCSEFEC2CF3F20(MM/TX)",
"TCSEFEC23FCF20(TX/MM)",
"TCSEFEC23F3F20(TX/TX)"
]
}
}
}
],
"category": "product_name",
"name": "ConneXium Industrial Firewall"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=1.2.0.4",
"product": {
"name": "Schneider Electric E+PLC100 Combination PLC firmware V1.2.0.4 and prior",
"product_id": "4"
}
}
],
"category": "product_name",
"name": "E+PLC100 Combination PLC"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=1.2.0.4",
"product": {
"name": "Schneider Electric E+PLC400 Combination PLC firmware V1.2.0.4 and prior",
"product_id": "5"
}
}
],
"category": "product_name",
"name": "E+PLC400 Combination PLC"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=1.1.0.32",
"product": {
"name": "Schneider Electric HMIGXU V1.1.0.32 and prior",
"product_id": "6"
}
}
],
"category": "product_name",
"name": "HMIGXU"
},
{
"branches": [
{
"category": "product_name",
"name": "HMIGTO Series",
"product": {
"name": "Schneider Electric Magelis HMI HMIGTO Series",
"product_id": "112"
}
},
{
"category": "product_name",
"name": "HMISCU Series",
"product": {
"name": "Schneider Electric Magelis HMI HMISCU Series",
"product_id": "113"
}
},
{
"category": "product_name",
"name": "HMIGTUX Series",
"product": {
"name": "Schneider Electric Magelis HMI HMIGTUX Series",
"product_id": "114"
}
},
{
"category": "product_name",
"name": "HMIGTU Series",
"product": {
"name": "Schneider Electric Magelis HMI HMIGTU Series",
"product_id": "115"
}
},
{
"category": "product_name",
"name": "HMIGTU Series - Open Box",
"product": {
"name": "Schneider Electric Magelis HMI HMIGTU Series - Open Box",
"product_id": "132"
}
}
],
"category": "product_family",
"name": "Magelis HMI"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.2 SP9",
"product": {
"name": "Schneider Electric Vijeo Designer V6.2 SP9 and prior",
"product_id": "8"
}
}
],
"category": "product_name",
"name": "Vijeo Designer"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=1.30",
"product": {
"name": "Schneider Electric Modicon X80 I/O modules: - Modicon X80 BMEAHI0812 HART Analog Input Module V1.30 and prior",
"product_id": "9",
"product_identification_helper": {
"model_numbers": [
"BMEAHI0812"
]
}
}
}
],
"category": "product_name",
"name": "Modicon X80 I/O modules: - Modicon X80 BMEAHI0812 HART Analog Input Module"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=1.30",
"product": {
"name": "Schneider Electric Modicon X80 I/O modules: - Modicon X80 BMEAHO0412 HART Analog Output Module V1.30 and prior",
"product_id": "10",
"product_identification_helper": {
"model_numbers": [
"BMEAHO0412"
]
}
}
}
],
"category": "product_name",
"name": "Modicon X80 I/O modules: - Modicon X80 BMEAHO0412 HART Analog Output Module"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=1.01",
"product": {
"name": "Schneider Electric Modicon X80 I/O modules: - Modicon Network Option Switch BMENOS0300 (C) V1.01 and prior",
"product_id": "11",
"product_identification_helper": {
"model_numbers": [
"BMENOS0300 (C)"
]
}
}
}
],
"category": "product_name",
"name": "Modicon X80 I/O modules: - Modicon Network Option Switch BMENOS0300 (C)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=2.40",
"product": {
"name": "Schneider Electric Modicon X80 I/O modules: - I/O Drop Adapters - BMXCRA31200 V2.40 and prior",
"product_id": "12",
"product_identification_helper": {
"model_numbers": [
"BMXCRA31200"
]
}
}
},
{
"category": "product_version_range",
"name": "\u003c=2.40",
"product": {
"name": "Schneider Electric Modicon X80 I/O modules: - I/O Drop Adapters - BMXCRA31210 (C) V2.40 and prior",
"product_id": "75",
"product_identification_helper": {
"model_numbers": [
"BMXCRA31210(C)"
]
}
}
},
{
"category": "product_version_range",
"name": "\u003c=2.40",
"product": {
"name": "Schneider Electric Modicon X80 I/O modules: - I/O Drop Adapters - BMECRA31210 (C) V2.40 and prior",
"product_id": "76",
"product_identification_helper": {
"model_numbers": [
"BMECRA31210(C)"
]
}
}
}
],
"category": "product_name",
"name": "Modicon X80 I/O modules: - I/O Drop Adapters - BMXCRA31200, BMXCRA31210 (C), BMECRA31210 (C) "
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=1.51.15.05",
"product": {
"name": "Schneider Electric Modicon LMC078 Controller V1.51.15.05 and prior",
"product_id": "13"
}
}
],
"category": "product_name",
"name": "Modicon LMC078 Controller "
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c5.1.9.14",
"product": {
"name": "Schneider Electric Modicon M241 Micro PLC Firmware versions prior to V5.1.9.14",
"product_id": "14"
}
}
],
"category": "product_name",
"name": "Modicon M241 Micro PLC"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c5.1.9.14",
"product": {
"name": "Schneider Electric Modicon M251 Micro PLC Firmware versions prior to V5.1.9.14",
"product_id": "15"
}
}
],
"category": "product_name",
"name": "Modicon M251 Micro PLC"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=5.0.3.2",
"product": {
"name": "Schneider Electric Modicon M262 Logic/Motion Controller Firmware V5.0.3.2 and prior ",
"product_id": "16"
}
}
],
"category": "product_name",
"name": "Modicon M262 Logic/Motion Controller"
},
{
"category": "product_name",
"name": "Modicon M580 Ethernet Communications Modules: BMENOC0301",
"product": {
"name": "Schneider Electric Modicon M580 Ethernet Communications Modules: BMENOC0301",
"product_id": "17",
"product_identification_helper": {
"model_numbers": [
"BMENOC0301"
]
}
}
},
{
"category": "product_name",
"name": "Modicon M580 Ethernet Communications Modules: BMENOC0311",
"product": {
"name": "Schneider Electric Modicon M580 Ethernet Communications Modules: BMENOC0311",
"product_id": "77",
"product_identification_helper": {
"model_numbers": [
"BMENOC0311"
]
}
}
},
{
"category": "product_name",
"name": "Modicon M580 Ethernet Communications Modules: BMENOC0321",
"product": {
"name": "Schneider Electric Modicon M580 Ethernet Communications Modules: BMENOC0321",
"product_id": "78",
"product_identification_helper": {
"model_numbers": [
"BMENOC0321"
]
}
}
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=2.1",
"product": {
"name": "Schneider Electric Modicon M580 Ethernet communications Modules Modicon M580 IEC 61850 - BMENOP0300 (C) V2.1 and prior",
"product_id": "18",
"product_identification_helper": {
"model_numbers": [
"BMENOP0300(C)"
]
}
}
}
],
"category": "product_name",
"name": "Modicon M580 Ethernet communications Modules Modicon M580 IEC 61850 - BMENOP0300 (C)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=2.90",
"product": {
"name": "Schneider Electric Modicon M580 ePAC CPUs including Safety CPUs BMEP584040 V2.90 and prior",
"product_id": "19",
"product_identification_helper": {
"model_numbers": [
"BMEP584040"
]
}
}
},
{
"category": "product_version_range",
"name": "\u003c=2.90",
"product": {
"name": "Schneider Electric Modicon M580 ePAC CPUs including Safety CPUs BMEH584040 and C V2.90 and prior",
"product_id": "80",
"product_identification_helper": {
"model_numbers": [
"BMEH584040 and C"
]
}
}
},
{
"category": "product_version_range",
"name": "\u003c=2.90",
"product": {
"name": "Schneider Electric Modicon M580 ePAC CPUs including Safety CPUs BMEP586040 and C V2.90 and prior",
"product_id": "81",
"product_identification_helper": {
"model_numbers": [
"BMEP586040 and C"
]
}
}
},
{
"category": "product_version_range",
"name": "\u003c=2.90",
"product": {
"name": "Schneider Electric Modicon M580 ePAC CPUs including Safety CPUs BMEH586040 and C V2.90 and prior",
"product_id": "82",
"product_identification_helper": {
"model_numbers": [
"BMEH586040 and C"
]
}
}
},
{
"category": "product_version_range",
"name": "\u003c=2.90",
"product": {
"name": "Schneider Electric Modicon M580 ePAC CPUs including Safety CPUs BMEP581020 and H V2.90 and prior",
"product_id": "83",
"product_identification_helper": {
"model_numbers": [
"BMEP581020 and H"
]
}
}
},
{
"category": "product_version_range",
"name": "\u003c=2.90",
"product": {
"name": "Schneider Electric Modicon M580 ePAC CPUs including Safety CPUs BMEP582020 and H V2.90 and prior",
"product_id": "84",
"product_identification_helper": {
"model_numbers": [
"BMEP582020 and H"
]
}
}
},
{
"category": "product_version_range",
"name": "\u003c=2.90",
"product": {
"name": "Schneider Electric Modicon M580 ePAC CPUs including Safety CPUs BMEP582040 and H V2.90 and prior",
"product_id": "85",
"product_identification_helper": {
"model_numbers": [
"BMEP582040 and H"
]
}
}
},
{
"category": "product_version_range",
"name": "\u003c=2.90",
"product": {
"name": "Schneider Electric Modicon M580 ePAC CPUs including Safety CPUs BMEP583020 V2.90 and prior",
"product_id": "86",
"product_identification_helper": {
"model_numbers": [
"BMEP583020"
]
}
}
},
{
"category": "product_version_range",
"name": "\u003c=2.90",
"product": {
"name": "Schneider Electric Modicon M580 ePAC CPUs including Safety CPUs BMEP583040 V2.90 and prior",
"product_id": "87",
"product_identification_helper": {
"model_numbers": [
"BMEP583040"
]
}
}
},
{
"category": "product_version_range",
"name": "\u003c=2.90",
"product": {
"name": "Schneider Electric Modicon M580 ePAC CPUs including Safety CPUs BMEP584020 V2.90 and prior",
"product_id": "88",
"product_identification_helper": {
"model_numbers": [
"BMEP584020"
]
}
}
},
{
"category": "product_version_range",
"name": "\u003c=2.90",
"product": {
"name": "Schneider Electric Modicon M580 ePAC CPUs including Safety CPUs BMEP585040 and C V2.90 and prior",
"product_id": "89",
"product_identification_helper": {
"model_numbers": [
"BMEP585040 and C"
]
}
}
},
{
"category": "product_version_range",
"name": "\u003c=2.90",
"product": {
"name": "Schneider Electric Modicon M580 ePAC CPUs including Safety CPUs BMEH582040 and C V2.90 and prior",
"product_id": "90",
"product_identification_helper": {
"model_numbers": [
"BMEH582040 and C"
]
}
}
},
{
"category": "product_version_range",
"name": "\u003c=2.90",
"product": {
"name": "Schneider Electric Modicon M580 ePAC CPUs including Safety CPUs BMEP584040S V2.90 and prior",
"product_id": "91",
"product_identification_helper": {
"model_numbers": [
"BMEP584040S"
]
}
}
},
{
"category": "product_version_range",
"name": "\u003c=2.90",
"product": {
"name": "Schneider Electric Modicon M580 ePAC CPUs including Safety CPUs BMEH584040S V2.90 and prior",
"product_id": "92",
"product_identification_helper": {
"model_numbers": [
"BMEH584040S"
]
}
}
},
{
"category": "product_version_range",
"name": "\u003c=2.90",
"product": {
"name": "Schneider Electric Modicon M580 ePAC CPUs including Safety CPUs BMEH586040S V2.90 and prior",
"product_id": "93",
"product_identification_helper": {
"model_numbers": [
"BMEH586040S"
]
}
}
},
{
"category": "product_version_range",
"name": "\u003c=2.90",
"product": {
"name": "Schneider Electric Modicon M580 ePAC CPUs including Safety CPUs BMEP582040S V2.90 and prior",
"product_id": "94",
"product_identification_helper": {
"model_numbers": [
"BMEP582040S"
]
}
}
}
],
"category": "product_name",
"name": "Modicon M580 ePAC CPUs including Safety CPUs"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=1.4",
"product": {
"name": "Schneider Electric Modicon MC80 Programmable Logic Controller V1.4 and prior",
"product_id": "20"
}
}
],
"category": "product_name",
"name": "Modicon MC80 Programmable Logic Controller"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=2.01",
"product": {
"name": "Schneider Electric Modicon Momentum Unity V2.01 and prior",
"product_id": "21"
}
}
],
"category": "product_name",
"name": "Modicon Momentum Unity"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "Schneider Electric Modicon Quantum Ethernet DIO network module - 140NOC78x00 (C) All versions",
"product_id": "22",
"product_identification_helper": {
"model_numbers": [
"140NOC78x00 (C)"
]
}
}
}
],
"category": "product_name",
"name": "Modicon Quantum Ethernet DIO network module - 140NOC78x00 (C)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=2.40",
"product": {
"name": "Schneider Electric Modicon Quantum 140CRA31200 V2.40 and prior",
"product_id": "23",
"product_identification_helper": {
"model_numbers": [
"140CRA31200"
]
}
}
},
{
"category": "product_version_range",
"name": "\u003c=2.40",
"product": {
"name": "Schneider Electric Modicon Quantum 140CRA31908 V2.40 and prior",
"product_id": "79",
"product_identification_helper": {
"model_numbers": [
"140CRA31908"
]
}
}
}
],
"category": "product_name",
"name": "Modicon Quantum 140 CRA - 140CRA31200, 140CRA31908"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "Schneider Electric Modicon Quantum Head 140 CRP module - 140CRP31200 (C) All versions",
"product_id": "24",
"product_identification_helper": {
"model_numbers": [
"140CRP31200 (C)"
]
}
}
}
],
"category": "product_name",
"name": "Modicon Quantum Head 140 CRP module - 140CRP31200 (C)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "Schneider Electric Modicon Quantum 140 NOP Communications Module All versions",
"product_id": "25"
}
}
],
"category": "product_name",
"name": "Modicon Quantum 140 NOP Communications Module"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=8.14",
"product": {
"name": "Schneider Electric Nanodac Recorder / Controller V8.14 and prior",
"product_id": "26"
}
}
],
"category": "product_name",
"name": "Nanodac Recorder / Controller"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=1.62.5.6",
"product": {
"name": "Schneider Electric PacDrive 3 Eco/Pro/Pro2 Motion Controllers V1.62.5.6 and prior",
"product_id": "27"
}
}
],
"category": "product_name",
"name": "PacDrive 3 Eco/Pro/Pro2 Motion Controllers "
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "Schneider Electric Profibus Remote Master (TCSEGPA23F14F) All versions",
"product_id": "28",
"product_identification_helper": {
"model_numbers": [
"TCSEGPA23F14F"
]
}
}
}
],
"category": "product_name",
"name": "Profibus Remote Master (TCSEGPA23F14F)"
},
{
"category": "product_name",
"name": "Pro-face IoT Gateway",
"product": {
"name": "Schneider Electric Pro-face IoT Gateway",
"product_id": "29"
}
},
{
"branches": [
{
"category": "product_name",
"name": "GP4000H/R/E Series",
"product": {
"name": "Schneider Electric Pro-face HMI GP4000H/R/E Series",
"product_id": "120"
}
},
{
"category": "product_name",
"name": "GP4100 Compact Series",
"product": {
"name": "Schneider Electric Pro-face HMI GP4100 Compact Series",
"product_id": "121"
}
},
{
"category": "product_name",
"name": "LT4000M Modular Series",
"product": {
"name": "Schneider Electric Pro-face HMI LT4000M Modular Series",
"product_id": "122"
}
},
{
"category": "product_name",
"name": "GP4000E Series",
"product": {
"name": "Schneider Electric Pro-face HMI GP4000E Series",
"product_id": "123"
}
},
{
"category": "product_name",
"name": "SP5000 Series",
"product": {
"name": "Schneider Electric Pro-face HMI SP5000 Series",
"product_id": "124"
}
},
{
"category": "product_name",
"name": "SP5000X Series",
"product": {
"name": "Schneider Electric Pro-face HMI SP5000X Series",
"product_id": "125"
}
}
],
"category": "product_family",
"name": "Pro-face HMI"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=4.09.100",
"product": {
"name": "Schneider Electric GP-ProEX V4.09.100 and prior",
"product_id": "30"
}
}
],
"category": "product_name",
"name": "GP-ProEX "
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=8.14.7",
"product": {
"name": "Schneider Electric SCADAPack 53xE RTUs V8.14.7 and prior ",
"product_id": "31"
}
}
],
"category": "product_name",
"name": "SCADAPack 53xE RTUs "
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=9.2.3",
"product": {
"name": "Schneider Electric SCADAPack 57x RTUs V9.2.3 and earlier",
"product_id": "32"
}
}
],
"category": "product_name",
"name": "SCADAPack 57x RTUs"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=7.0.34 SY-1101207_G17",
"product": {
"name": "Schneider Electric SCD6000 Industrial RTU V7.0.34 SY-1101207_G17 and prior",
"product_id": "33"
}
}
],
"category": "product_name",
"name": "SCD6000 Industrial RTU"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003e=11.1 | \u003c=11.4",
"product": {
"name": "Schneider Electric Tricon Communication Modules TCM/TCM2 V11.1 - V11.4",
"product_id": "34"
}
}
],
"category": "product_name",
"name": "Tricon Communication Modules TCM/TCM2"
},
{
"branches": [
{
"category": "product_version",
"name": "3.0",
"product": {
"name": "Schneider Electric Trident Communication Integration Module V3.0",
"product_id": "35"
}
}
],
"category": "product_name",
"name": "Trident Communication Integration Module"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=2.37",
"product": {
"name": "Schneider Electric versadac\u2122 Scalable Data Recorder firmware V2.37 version and prior",
"product_id": "36"
}
}
],
"category": "product_name",
"name": "versadac\u2122 Scalable Data Recorder"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cD5.24 - C264 D5.X",
"product": {
"name": "Schneider Electric Easergy MiCOM C264 [For PACiS (ESO) 6.3] Versions prior to D5.24 - C264 D5.X",
"product_id": "37"
}
}
],
"category": "product_name",
"name": "Easergy MiCOM C264 [For PACiS (ESO) 6.3]"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c1.79 - C264 D1.X ",
"product": {
"name": "Schneider Electric Easergy MiCOM C264 [For PACiS (ESO) 5.2] Versions prior to 1.79 - C264 D1.X ",
"product_id": "38"
}
}
],
"category": "product_name",
"name": "Easergy MiCOM C264 [For PACiS (ESO) 5.2]"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cD4.25 - C264 D4.X ",
"product": {
"name": "Schneider Electric Easergy MiCOM C264 [For PACiS (ESO) 6.1] Versions prior to D4.25 - C264 D4.X ",
"product_id": "39"
}
}
],
"category": "product_name",
"name": "Easergy MiCOM C264 [For PACiS (ESO) 6.1]"
},
{
"branches": [
{
"category": "product_version",
"name": "66x",
"product": {
"name": "Schneider Electric Easergy MiCOM P30 with rejuvenated Ethernet board CORTEC v66x",
"product_id": "40"
}
}
],
"category": "product_name",
"name": "Easergy MiCOM P30 with rejuvenated Ethernet board CORTEC"
},
{
"branches": [
{
"category": "product_version",
"name": "670",
"product": {
"name": "Schneider Electric Easergy MiCOM P30 v670",
"product_id": "41"
}
}
],
"category": "product_name",
"name": "Easergy MiCOM P30"
},
{
"branches": [
{
"category": "product_version_range",
"name": " All P40 with rejuvenated Ethernet board CORTEC digit 7=Q, R or S",
"product": {
"name": "Schneider Electric Easergy MiCOM Px40 All P40 with rejuvenated Ethernet board CORTEC digit 7=Q, R or S",
"product_id": "42"
}
}
],
"category": "product_name",
"name": "Easergy MiCOM Px40"
},
{
"branches": [
{
"category": "product_version",
"name": "01",
"product": {
"name": "Schneider Electric Easergy P5 Firmware version: V01 Release: 001.029 Date: 29th May 2019",
"product_id": "43"
}
}
],
"category": "product_name",
"name": "Easergy P5"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=1.5.2",
"product": {
"name": "Schneider Electric Easergy T300 (SC150 \u0026 LV150) Firmware 1.5.2 and earlier",
"product_id": "44"
}
}
],
"category": "product_name",
"name": "Easergy T300 (SC150 \u0026 LV150)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=2.1.0",
"product": {
"name": "Schneider Electric ION7400 V2.1.0 and earlier",
"product_id": "45"
}
}
],
"category": "product_name",
"name": "ION7400"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=002.100.000",
"product": {
"name": "Schneider Electric ION7400 MID (METSEION74001) V002.100.000 firmware version and earlier",
"product_id": "46",
"product_identification_helper": {
"model_numbers": [
"METSEION74001"
]
}
}
}
],
"category": "product_name",
"name": "ION7400 MID (METSEION74001) "
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=2.1.0",
"product": {
"name": "Schneider Electric ION9000 V2.1.0 and earlier",
"product_id": "47"
}
}
],
"category": "product_name",
"name": "ION9000"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=2.1.0",
"product": {
"name": "Schneider Electric PM8000 V2.1.0 and earlier",
"product_id": "48"
}
}
],
"category": "product_name",
"name": "PM8000"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=002.100.000",
"product": {
"name": "Schneider Electric PM8000 MID (METSEPM82401) V002.100.000 firmware version and earlier",
"product_id": "49",
"product_identification_helper": {
"model_numbers": [
"METSEPM82401"
]
}
}
}
],
"category": "product_name",
"name": "PM8000 MID (METSEPM82401)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "K3 firmware and earlier for C3414 CPU ",
"product": {
"name": "Schneider Electric SAGE RTU K3 firmware and earlier for C3414 CPU ",
"product_id": "50"
}
}
],
"category": "product_name",
"name": "SAGE RTU"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=11.04.17",
"product": {
"name": "Schneider Electric Saitel DR with HU_A CPU V11.04.17 and earlier.",
"product_id": "51"
}
}
],
"category": "product_name",
"name": "Saitel DR with HU_A CPU"
},
{
"branches": [
{
"category": "product_version",
"name": "TeSysisland_001.100.013.sedp (01.0100)",
"product": {
"name": "Schneider Electric TeSys island Version TeSysisland_001.100.013.sedp (01.0100)",
"product_id": "52"
}
}
],
"category": "product_name",
"name": "TeSys island"
},
{
"branches": [
{
"category": "product_version",
"name": "5.37",
"product": {
"name": "Schneider Electric ConneXium Industrial Firewall/Router - TCSEFEC2CF3F21(MM/TX) - TCSEFEC23FCF21 (TX/MM) - TCSEFEC23F3F21 (TX/TX) Version 5.37",
"product_id": "53",
"product_identification_helper": {
"model_numbers": [
"TCSEFEC2CF3F21(MM/TX)",
"TCSEFEC23FCF21(TX/MM)",
"TCSEFEC23F3F21(TX/TX)"
]
}
}
}
],
"category": "product_name",
"name": "ConneXium Industrial Firewall/Router - TCSEFEC2CF3F21(MM/TX) - TCSEFEC23FCF21 (TX/MM) - TCSEFEC23F3F21 (TX/TX)"
},
{
"branches": [
{
"category": "product_version",
"name": "1.3.0.0",
"product": {
"name": "Schneider Electric E+PLC100 Combination PLC V1.3.0.0",
"product_id": "54"
}
}
],
"category": "product_name",
"name": "E+PLC100 Combination PLC"
},
{
"branches": [
{
"category": "product_version",
"name": "1.3.0.0",
"product": {
"name": "Schneider Electric E+PLC400 Combination PLC V1.3.0.0",
"product_id": "55"
}
}
],
"category": "product_name",
"name": "E+PLC400 Combination PLC"
},
{
"branches": [
{
"category": "product_version",
"name": "1.1.0.4404",
"product": {
"name": "Schneider Electric Vijeo Basic runtime software V1.1.0.4404",
"product_id": "56"
}
}
],
"category": "product_name",
"name": "Vijeo Basic runtime software"
},
{
"branches": [
{
"category": "product_version",
"name": "6.2 SP9 HotFix1 Alpha4",
"product": {
"name": "Schneider Electric Vijeo Designer V6.2 SP9 HotFix1 Alpha4",
"product_id": "57"
}
}
],
"category": "product_name",
"name": "Vijeo Designer"
},
{
"branches": [
{
"category": "product_version",
"name": "2.2",
"product": {
"name": "Schneider Electric Modicon M580 Ethernet communications Modules Modicon M580 IEC 61850 - BMENOP0300 (C) version 2.2",
"product_id": "58",
"product_identification_helper": {
"model_numbers": [
"BMENOP0300 (C)"
]
}
}
}
],
"category": "product_name",
"name": "Modicon M580 Ethernet communications Modules Modicon M580 IEC 61850 - BMENOP0300 (C)"
},
{
"branches": [
{
"category": "product_version",
"name": "3.10",
"product": {
"name": "Schneider Electric Modicon M580 BMEP584040 V3.10",
"product_id": "59",
"product_identification_helper": {
"model_numbers": [
"BMEP584040"
]
}
}
},
{
"category": "product_version",
"name": "3.10",
"product": {
"name": "Schneider Electric Modicon M580 BMEH584040 and C 3.10",
"product_id": "95",
"product_identification_helper": {
"model_numbers": [
"BMEH584040 and C"
]
}
}
},
{
"category": "product_version",
"name": "3.10",
"product": {
"name": "Schneider Electric Modicon M580 BMEP586040 and C 3.10",
"product_id": "96",
"product_identification_helper": {
"model_numbers": [
"BMEP586040 and C"
]
}
}
},
{
"category": "product_version",
"name": "3.10",
"product": {
"name": "Schneider Electric Modicon M580 BMEH586040 and C 3.10",
"product_id": "97",
"product_identification_helper": {
"model_numbers": [
"BMEH586040 and C"
]
}
}
},
{
"category": "product_version",
"name": "3.10",
"product": {
"name": "Schneider Electric Modicon M580 BMEP581020 and H 3.10",
"product_id": "98",
"product_identification_helper": {
"model_numbers": [
"BMEP581020 and H"
]
}
}
},
{
"category": "product_version",
"name": "3.10",
"product": {
"name": "Schneider Electric Modicon M580 BMEP582020 and H 3.10",
"product_id": "99",
"product_identification_helper": {
"model_numbers": [
"BMEP582020 and H"
]
}
}
},
{
"category": "product_version",
"name": "3.10",
"product": {
"name": "Schneider Electric Modicon M580 BMEP582040 and H 3.10",
"product_id": "100",
"product_identification_helper": {
"model_numbers": [
"BMEP582040 and H"
]
}
}
},
{
"category": "product_version",
"name": "3.10",
"product": {
"name": "Schneider Electric Modicon M580 BMEP583020 3.10",
"product_id": "101",
"product_identification_helper": {
"model_numbers": [
"BMEP583020"
]
}
}
},
{
"category": "product_version",
"name": "3.10",
"product": {
"name": "Schneider Electric Modicon M580 BMEP583040 3.10",
"product_id": "102",
"product_identification_helper": {
"model_numbers": [
"BMEP583040"
]
}
}
},
{
"category": "product_version",
"name": "3.10",
"product": {
"name": "Schneider Electric Modicon M580 BMEP584020 3.10",
"product_id": "103",
"product_identification_helper": {
"model_numbers": [
"BMEP584020"
]
}
}
},
{
"category": "product_version",
"name": "3.10",
"product": {
"name": "Schneider Electric Modicon M580 BMEP585040 and C 3.10",
"product_id": "104",
"product_identification_helper": {
"model_numbers": [
"BMEP585040 and C"
]
}
}
},
{
"category": "product_version",
"name": "3.10",
"product": {
"name": "Schneider Electric Modicon M580 BMEH582040 and C 3.10",
"product_id": "105",
"product_identification_helper": {
"model_numbers": [
"BMEH582040 and C"
]
}
}
},
{
"category": "product_version",
"name": "3.10",
"product": {
"name": "Schneider Electric Modicon M580 BMEP584040S 3.10",
"product_id": "106",
"product_identification_helper": {
"model_numbers": [
"BMEP584040S"
]
}
}
},
{
"category": "product_version",
"name": "3.10",
"product": {
"name": "Schneider Electric Modicon M580 BMEH584040S 3.10",
"product_id": "107",
"product_identification_helper": {
"model_numbers": [
"BMEH584040S"
]
}
}
},
{
"category": "product_version",
"name": "3.10",
"product": {
"name": "Schneider Electric Modicon M580 BMEH586040S 3.10",
"product_id": "108",
"product_identification_helper": {
"model_numbers": [
"BMEH586040S"
]
}
}
},
{
"category": "product_version",
"name": "3.10",
"product": {
"name": "Schneider Electric Modicon M580 BMEP582040S 3.10",
"product_id": "109",
"product_identification_helper": {
"model_numbers": [
"BMEP582040S"
]
}
}
}
],
"category": "product_name",
"name": "Modicon M580"
},
{
"branches": [
{
"category": "product_version",
"name": "1.5",
"product": {
"name": "Schneider Electric Modicon MC80 Programmable Logic Controller V1.5",
"product_id": "60"
}
}
],
"category": "product_name",
"name": "Modicon MC80 Programmable Logic Controller"
},
{
"branches": [
{
"category": "product_version",
"name": "SV2.10",
"product": {
"name": "Schneider Electric Modicon Momentum Unity SV2.10",
"product_id": "61"
}
}
],
"category": "product_name",
"name": "Modicon Momentum Unity"
},
{
"branches": [
{
"category": "product_version",
"name": "2.50",
"product": {
"name": "Schneider Electric Modicon Quantum 140CRA31200 V2.50",
"product_id": "62",
"product_identification_helper": {
"model_numbers": [
"140CRA31200"
]
}
}
}
],
"category": "product_name",
"name": "Modicon Quantum 140CRA31200"
},
{
"branches": [
{
"category": "product_version",
"name": "2.50",
"product": {
"name": "Schneider Electric Modicon Quantum 140CRA31908 V2.50",
"product_id": "63",
"product_identification_helper": {
"model_numbers": [
"140CRA31908"
]
}
}
}
],
"category": "product_name",
"name": "Modicon Quantum 140CRA31908"
},
{
"branches": [
{
"category": "product_version",
"name": "8.16",
"product": {
"name": "Schneider Electric Nanodac Recorder / Controller V8.16",
"product_id": "64"
}
}
],
"category": "product_name",
"name": "Nanodac Recorder / Controller"
},
{
"branches": [
{
"category": "product_version",
"name": "7.0.36 SY - 1101207_G18",
"product": {
"name": "Schneider Electric SCD6000 Industrial RTU V7.0.36 SY - 1101207_G18",
"product_id": "65"
}
}
],
"category": "product_name",
"name": "SCD6000 Industrial RTU"
},
{
"branches": [
{
"category": "product_version",
"name": "01",
"product": {
"name": "Schneider Electric Easergy P5 Firmware version: V01 Release: 200.008 Release date: 15th Nov 2019",
"product_id": "66"
}
}
],
"category": "product_name",
"name": "Easergy P5"
},
{
"branches": [
{
"category": "product_version",
"name": "2.7",
"product": {
"name": "Schneider Electric Easergy T300 (SC150 \u0026 LV150) version - 2.7",
"product_id": "67"
}
}
],
"category": "product_name",
"name": "Easergy T300 (SC150 \u0026 LV150)"
},
{
"branches": [
{
"category": "product_version",
"name": "002.002.001",
"product": {
"name": "Schneider Electric ION7400 MID (METSEION74001) V002.002.001",
"product_id": "68",
"product_identification_helper": {
"model_numbers": [
"METSEION74001"
]
}
}
}
],
"category": "product_name",
"name": "ION7400 MID (METSEION74001)"
},
{
"branches": [
{
"category": "product_version",
"name": "002.002.001",
"product": {
"name": "Schneider Electric PM8000 MID (METSEPM82401) V002.002.001",
"product_id": "69",
"product_identification_helper": {
"model_numbers": [
"METSEPM82401"
]
}
}
}
],
"category": "product_name",
"name": "PM8000 MID (METSEPM82401)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003e=TeSysisland_002.100.013.sedp (02.0100)",
"product": {
"name": "Schneider Electric TeSys island TeSysisland_002.100.013.sedp (02.0100) or later version",
"product_id": "70"
}
}
],
"category": "product_name",
"name": "TeSys island"
},
{
"branches": [
{
"category": "product_version",
"name": "2.41",
"product": {
"name": "Schneider Electric versadac\u2122 Scalable Data Recorder V2.41",
"product_id": "72"
}
}
],
"category": "product_name",
"name": "versadac\u2122 Scalable Data Recorder"
},
{
"category": "product_name",
"name": "IEC 61850 communication module BMENOP0300",
"product": {
"name": "Schneider Electric IEC 61850 communication module BMENOP0300",
"product_id": "74",
"product_identification_helper": {
"model_numbers": [
"BMENOP0300"
]
}
}
}
],
"category": "vendor",
"name": "Schneider Electric"
}
],
"relationships": [
{
"category": "installed_on",
"full_product_name": {
"name": "Schneider Electric GP-ProEX V4.09.100 and prior installed on Pro-face IoT Gateway",
"product_id": "111"
},
"product_reference": "30",
"relates_to_product_reference": "29"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Schneider Electric Vijeo Designer V6.2 SP9 and prior installed on Schneider Electric Magelis HMI HMIGTO Series",
"product_id": "116"
},
"product_reference": "8",
"relates_to_product_reference": "112"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Schneider Electric Vijeo Designer V6.2 SP9 and prior installed on Schneider Electric Magelis HMI HMISCU Series",
"product_id": "117"
},
"product_reference": "8",
"relates_to_product_reference": "113"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Schneider Electric Vijeo Designer V6.2 SP9 and prior installed on Schneider Electric Magelis HMI HMIGTUX Series",
"product_id": "118"
},
"product_reference": "8",
"relates_to_product_reference": "114"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Schneider Electric Vijeo Designer V6.2 SP9 and prior installed on Schneider Electric Magelis HMI HMIGTU Series",
"product_id": "119"
},
"product_reference": "8",
"relates_to_product_reference": "115"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Schneider Electric GP-ProEX V4.09.100 and prior installed on Schneider Electric Pro-face HMI GP4000H/R/E Series",
"product_id": "126"
},
"product_reference": "30",
"relates_to_product_reference": "120"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Schneider Electric GP-ProEX V4.09.100 and prior installed on Schneider Electric Pro-face HMI GP4100 Compact Series",
"product_id": "127"
},
"product_reference": "30",
"relates_to_product_reference": "121"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Schneider Electric GP-ProEX V4.09.100 and prior installed on Schneider Electric Pro-face HMI LT4000M Modular Series",
"product_id": "128"
},
"product_reference": "30",
"relates_to_product_reference": "122"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Schneider Electric GP-ProEX V4.09.100 and prior installed on Schneider Electric Pro-face HMI GP4000E Series",
"product_id": "129"
},
"product_reference": "30",
"relates_to_product_reference": "123"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Schneider Electric GP-ProEX V4.09.100 and prior installed on Schneider Electric Pro-face HMI SP5000 Series",
"product_id": "130"
},
"product_reference": "30",
"relates_to_product_reference": "124"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Schneider Electric GP-ProEX V4.09.100 and prior installed on Schneider Electric Pro-face HMI SP5000X Series",
"product_id": "131"
},
"product_reference": "30",
"relates_to_product_reference": "125"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Schneider Electric Vijeo Designer V6.2 SP9 and prior installed on Schneider Electric Magelis HMI HMIGTU Series - Open Box",
"product_id": "133"
},
"product_reference": "8",
"relates_to_product_reference": "132"
}
]
},
"vulnerabilities": [
{
"notes": [
{
"category": "details",
"text": "Remediating these vulnerabilities requires Schneider Electric to update affected products\u2019 firmware. \nCustomers cannot directly apply Wind River patches. \nWe have downloaded Wind River\u2019s patches and have established remediation plans to ensure all \ncurrent and future Schneider Electric products that rely on the Wind River platform evolve with these \nembedded fixes. Integrating and validating Wind River\u2019s patches requires thorough testing and \npossibly recertification to ensure the quality of the updated product. \nThis bulletin will be updated as remediations become available. For all other affected products, \ncustomers should refer to mitigations to reduce risk to their installations. ",
"title": "Remediations and Mitigations "
}
],
"product_status": {
"fixed": [
"53",
"54",
"55",
"56",
"57",
"58",
"59",
"60",
"61",
"62",
"63",
"64",
"65",
"66",
"68",
"69",
"70",
"67",
"72",
"74",
"95",
"96",
"97",
"98",
"99",
"100",
"101",
"102",
"103",
"104",
"105",
"106",
"107",
"108",
"109"
],
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"6",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"31",
"32",
"33",
"34",
"35",
"36",
"37",
"38",
"39",
"40",
"41",
"42",
"43",
"44",
"45",
"46",
"47",
"48",
"49",
"50",
"51",
"52",
"75",
"76",
"77",
"78",
"80",
"81",
"82",
"83",
"84",
"85",
"86",
"87",
"88",
"89",
"90",
"91",
"92",
"93",
"94",
"116",
"117",
"118",
"119",
"111",
"126",
"127",
"128",
"129",
"130",
"131"
],
"known_not_affected": [
"133"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Since the vulnerabilities are present in the TCP/IP stack of the VxWorks product, an active network \r\nconnection is required to exploit them. Therefore, Schneider Electric customers can act now to \r\nmitigate the risk of attack by limiting access to their devices, which would immediately reduce \r\nattempted exploits:\r\n\u2022 Limit access to the networks on which Schneider Electric devices are placed. \r\n\u2022 Do not expose Schneider Electric devices directly to the internet.\r\n\u2022 Restrict external network connectivity to the affected devices. \r\n\u2022 Always place Schneider Electric devices behind firewalls and/or other security protection \r\nappliances that limit access only to authorized remote connections. \r\n\u2022 Continually monitor affected devices for security events that could warn of attempted \r\nunauthorized access. \r\n\u2022 Limit access to internal networks where devices reside. \r\nFor more details and assistance on how to protect your installation, please contact your local \r\nSchneider Electric\u2019s Industrial Cybersecurity Services organization, which is fully aware of this \r\nsituation and can support you through the process.",
"product_ids": [
"1",
"3",
"22",
"24",
"25",
"28"
],
"restart_required": {
"category": "none"
}
},
{
"category": "mitigation",
"details": "Customers should immediately apply \r\nthe mitigations proposed in the \r\nmitigation section of this document \r\nand in the Cybersecurity Reference \r\nManual to reduce the risk of exploit:\r\nhttps://www.se.com/ww/en/download\r\n/document/EIO0000001999/\r\n",
"product_ids": [
"1"
],
"restart_required": {
"category": "none"
},
"url": "https://www.se.com/ww/en/download/document/EIO0000001999/"
},
{
"category": "vendor_fix",
"details": "Software Version 5.37 available \r\nhere: \r\nhttps://www.schneider\u0002electric.com/en/download/document/\r\nTCSEFEC23FxF21/",
"product_ids": [
"2"
],
"restart_required": {
"category": "none"
},
"url": "https://www.schneider-electric.com/en/download/document/TCSEFEC23FxF21/"
},
{
"category": "mitigation",
"details": "These models have reached their \r\nend of life in January 2015 and are \r\nno longer commercially \r\navailable. Please apply \r\nthe mitigations proposed and/or \r\nupgrade to current models. Contact \r\nyour local technical support for more \r\ninformation.",
"product_ids": [
"3"
],
"restart_required": {
"category": "none"
},
"url": "https://www.schneider-electric.com/en/work/support/contacts.jsp"
},
{
"category": "vendor_fix",
"details": "Contact your local Eurotherm \r\ntechnical support https://www.eurotherm.com/en/support to get firmware \r\nV1.3.0.0.",
"product_ids": [
"4"
],
"restart_required": {
"category": "none"
},
"url": "https://www.eurotherm.com/en/support"
},
{
"category": "vendor_fix",
"details": "Contact your local Eurotherm \r\ntechnical support https://www.eurotherm.com/en/support to get firmware \r\nV1.3.0.0.",
"product_ids": [
"5"
],
"restart_required": {
"category": "none"
},
"url": "https://www.eurotherm.com/en/support"
},
{
"category": "vendor_fix",
"details": "Contact your local technical support https://www.schneider-electric.com/en/work/support/contacts.jsp \r\nto get the Vijeo Basic runtime \r\nV1.1.0.4404 software",
"product_ids": [
"6"
],
"restart_required": {
"category": "none"
},
"url": "https://www.schneider-electric.com/en/work/support/contacts.jsp"
},
{
"category": "vendor_fix",
"details": "Contact your local technical support https://www.schneider-electric.com/en/work/support/contacts.jsp \r\nto get the Vijeo Designer V6.2 SP9 \r\nHotFix1 Alpha4.\r\n",
"product_ids": [
"116",
"117",
"118",
"119"
],
"restart_required": {
"category": "none"
},
"url": "https://www.schneider-electric.com/en/work/support/contacts.jsp"
},
{
"category": "vendor_fix",
"details": "BMEAHI0812: \r\nhttps://www.se.com/ww/en/download\r\n/document/BMEAHI0812_Firmware_\r\nupgrade/",
"product_ids": [
"9"
],
"restart_required": {
"category": "none"
},
"url": "https://www.se.com/ww/en/download/document/BMEAHI0812_Firmware_upgrade/"
},
{
"category": "vendor_fix",
"details": "BMEAHO0412: \r\nhttps://www.se.com/ww/en/download\r\n/document/BMEAHO0412_Firmware\r\n_upgrade/",
"product_ids": [
"10"
],
"restart_required": {
"category": "none"
},
"url": "https://www.se.com/ww/en/download/document/BMEAHO0412_Firmware_upgrade/"
},
{
"category": "vendor_fix",
"details": "BMENOS0300 (C): \r\nhttps://www.se.com/ww/en/download\r\n/document/BMENOS0300_Firmware\r\n_/",
"product_ids": [
"11"
],
"restart_required": {
"category": "none"
},
"url": "https://www.se.com/ww/en/download/document/BMENOS0300_Firmware_/"
},
{
"category": "vendor_fix",
"details": "BMXCRA31200: \r\nhttps://www.se.com/ww/en/download\r\n/document/BMXCRA31200_FW_and\r\n_FW_History",
"product_ids": [
"12"
],
"restart_required": {
"category": "none"
},
"url": "https://www.se.com/ww/en/download/document/BMXCRA31200_FW_and_FW_History"
},
{
"category": "vendor_fix",
"details": "BMXCRA31210 (C): \r\nhttps://www.se.com/ww/en/download\r\n/document/BMXCRA31210_FW_and\r\n_FW_History",
"product_ids": [
"75"
],
"restart_required": {
"category": "none"
},
"url": "https://www.se.com/ww/en/download/document/BMXCRA31210_FW_and_FW_History"
},
{
"category": "vendor_fix",
"details": "BMECRA31210 (C):\r\nhttps://www.se.com/ww/en/download\r\n/document/BMECRA31210_FW_and\r\n_FW_History",
"product_ids": [
"76"
],
"restart_required": {
"category": "none"
},
"url": "https://www.se.com/ww/en/download/document/BMECRA31210_FW_and_FW_History"
},
{
"category": "vendor_fix",
"details": "Firmware update is available through \r\nSchneider Electric Software Update \r\n(SESU). Download the SESU client \r\nhere \r\nhttps://www.seupdate.schneider\u0002electric.com/download/SystemConsis\r\ntency/SoftwareUpdate/SESU_231/S\r\nESU_2.3.1_setup_sfx.exe",
"product_ids": [
"13"
],
"restart_required": {
"category": "none"
},
"url": "https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_231/SESU_2.3.1_setup_sfx.exe"
},
{
"category": "vendor_fix",
"details": "Firmware is available through SESU \r\nupdate or in Machine Expert 2.0 \r\navailable in the following link:\r\nhttps://www.se.com/ww/en/product\u0002range-download/2226-ecostruxure\u0002machine-expert/#/software-firmware\u0002tab",
"product_ids": [
"14"
],
"restart_required": {
"category": "none"
},
"url": "https://www.se.com/ww/en/product-range-download/2226-ecostruxure-machine-expert/#/software-firmware-tab"
},
{
"category": "vendor_fix",
"details": "Firmware is available through SESU \r\nupdate or in Machine Expert 2.0 \r\navailable in the following link:\r\nhttps://www.se.com/ww/en/product\u0002range-download/2226-ecostruxure\u0002machine-expert/ - /software\u0002firmware-tab",
"product_ids": [
"15"
],
"restart_required": {
"category": "none"
},
"url": "https://www.se.com/ww/en/product-range-download/2226-ecostruxure-machine-expert/#/software-firmware-tab"
},
{
"category": "vendor_fix",
"details": "Firmware update is the Schneider \r\nElectric Software Update (SESU). \r\nDownload the SESU client here \r\nhttps://www.update.schneider\u0002electric.com/download/SystemConsis\r\ntency/SoftwareUpdate/SESU_220/S\r\nESU_2.2.0_setup_sfx.exe ",
"product_ids": [
"16"
],
"restart_required": {
"category": "none"
},
"url": "https://www.update.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_220/SESU_2.2.0_setup_sfx.exe"
},
{
"category": "vendor_fix",
"details": "BMENOC0311: \r\nhttps://www.se.com/ww/en/download\r\n/document/BMENOC0311+Exec+an\r\nd+Release+Notes/",
"product_ids": [
"77"
],
"restart_required": {
"category": "none"
},
"url": "https://www.se.com/ww/en/download/document/BMENOC0311+Exec+and+Release+Notes/"
},
{
"category": "vendor_fix",
"details": "BMENOC0301: https://www.se.com/\r\nww/en/download/document/BMENO\r\nC0301+Exec+and+Release+Notes/",
"product_ids": [
"17"
],
"restart_required": {
"category": "none"
},
"url": "https://www.se.com/ww/en/download/document/BMENOC0301+Exec+and+Release+Notes/"
},
{
"category": "vendor_fix",
"details": "BMENOC0321: \r\nhttps://www.se.com/ww/en/download\r\n/document/BMENOC0321_Firmware/",
"product_ids": [
"78"
],
"restart_required": {
"category": "none"
},
"url": "https://www.se.com/ww/en/download/document/BMENOC0321_Firmware/"
},
{
"category": "vendor_fix",
"details": "A fix is available in version 2.2: \r\nhttps://www.se.com/ww/en/product/B\r\nMENOP0300/m580-iec-61850-\r\ncommunication-module/",
"product_ids": [
"18"
],
"restart_required": {
"category": "none"
},
"url": "https://www.se.com/ww/en/product/BMENOP0300/m580-iec-61850-communication-module/"
},
{
"category": "vendor_fix",
"details": "A fix is available on Modicon M580 \r\nfirmware V3.10, find links to fixed \r\nversions in the Download Links \r\nsection\r\nBMEP584040 https://www.schneider\u0002electric.com/en/download/document/M580_BMEP584040_SV3.10/",
"product_ids": [
"19"
],
"restart_required": {
"category": "none"
},
"url": "https://www.schneider-electric.com/en/download/document/M580_BMEP584040_SV3.10/"
},
{
"category": "vendor_fix",
"details": "A fix is available on Modicon M580 \r\nfirmware V3.10, find links to fixed \r\nversions in the Download Links \r\nsection\r\nBMEH584040 and C https://www.schneider\u0002electric.com/en/download/document/M580_BMEH584040_SV3.10/",
"product_ids": [
"80"
],
"restart_required": {
"category": "none"
},
"url": "https://www.schneider-electric.com/en/download/document/M580_BMEH584040_SV3.10/"
},
{
"category": "vendor_fix",
"details": "A fix is available on Modicon M580 \r\nfirmware V3.10, find links to fixed \r\nversions in the Download Links \r\nsection\r\nBMEP586040 and C\r\nhttps://www.schneider\u0002electric.com/en/download/document/M580_BMEP586040_SV3.10/",
"product_ids": [
"81"
],
"restart_required": {
"category": "none"
},
"url": "https://www.schneider-electric.com/en/download/document/M580_BMEP586040_SV3.10/"
},
{
"category": "vendor_fix",
"details": "A fix is available on Modicon M580 \r\nfirmware V3.10, find links to fixed \r\nversions in the Download Links \r\nsection\r\nhttps://www.schneider-electric.com/en/download/document/M580_BMEH586040_SV3.10/",
"product_ids": [
"82"
],
"restart_required": {
"category": "none"
},
"url": "https://www.schneider-electric.com/en/download/document/M580_BMEH586040_SV3.10/"
},
{
"category": "vendor_fix",
"details": "A fix is available on Modicon M580 \r\nfirmware V3.10, find links to fixed \r\nversions in the Download Links \r\nsection\r\nBMEP581020 and H https://www.schneider\u0002electric.com/en/download/document/M580_BMEP581020_SV3.10/",
"product_ids": [
"83"
],
"restart_required": {
"category": "none"
},
"url": "https://www.schneider-electric.com/en/download/document/M580_BMEP581020_SV3.10/"
},
{
"category": "vendor_fix",
"details": "A fix is available on Modicon M580 \r\nfirmware V3.10, find links to fixed \r\nversions in the Download Links \r\nsection\r\nBMEP582020 and H\r\nhttps://www.schneider\u0002electric.com/en/download/document/M580_BMEP582020_SV3.10/",
"product_ids": [
"84"
],
"restart_required": {
"category": "none"
},
"url": "https://www.schneider-electric.com/en/download/document/M580_BMEP582020_SV3.10/"
},
{
"category": "vendor_fix",
"details": "A fix is available on Modicon M580 \r\nfirmware V3.10, find links to fixed \r\nversions in the Download Links \r\nsection\r\nBMEP582040 and H\r\nhttps://www.schneider\u0002electric.com/en/download/document/M580_BMEP582040_SV3.10/\r\n",
"product_ids": [
"85"
],
"restart_required": {
"category": "none"
},
"url": "https://www.schneider-electric.com/en/download/document/M580_BMEP582040_SV3.10/"
},
{
"category": "vendor_fix",
"details": "A fix is available on Modicon M580 \r\nfirmware V3.10, find links to fixed \r\nversions in the Download Links \r\nsection\r\nBMEP583020\r\nhttps://www.schneider\u0002electric.com/en/download/document/M580_BMEP583020_SV3.10/",
"product_ids": [
"86"
],
"restart_required": {
"category": "none"
},
"url": "https://www.schneider-electric.com/en/download/document/M580_BMEP583020_SV3.10/"
},
{
"category": "vendor_fix",
"details": "A fix is available on Modicon M580 \r\nfirmware V3.10, find links to fixed \r\nversions in the Download Links \r\nsection\r\nBMEP583040\r\nhttps://www.schneider\u0002electric.com/en/download/document/M580_BMEP583040_SV3.10/",
"product_ids": [
"87"
],
"restart_required": {
"category": "none"
},
"url": "https://www.schneider-electric.com/en/download/document/M580_BMEP583040_SV3.10/"
},
{
"category": "vendor_fix",
"details": "A fix is available on Modicon M580 \r\nfirmware V3.10, find links to fixed \r\nversions in the Download Links \r\nsection\r\nBMEP584020\r\nhttps://www.schneider\u0002electric.com/en/download/document/M580_BMEP584020_SV3.10/",
"product_ids": [
"88"
],
"restart_required": {
"category": "none"
},
"url": "https://www.schneider-electric.com/en/download/document/M580_BMEP584020_SV3.10/"
},
{
"category": "vendor_fix",
"details": "A fix is available on Modicon M580 \r\nfirmware V3.10, find links to fixed \r\nversions in the Download Links \r\nsection\r\nBMEP585040 and C\r\nhttps://www.schneider\u0002electric.com/en/download/document/M580_BMEP585040_SV3.10/",
"product_ids": [
"89"
],
"restart_required": {
"category": "none"
},
"url": "https://www.schneider-electric.com/en/download/document/M580_BMEP585040_SV3.10/"
},
{
"category": "vendor_fix",
"details": "A fix is available on Modicon M580 \r\nfirmware V3.10, find links to fixed \r\nversions in the Download Links \r\nsection\r\nBMEH582040 and C\r\nhttps://www.schneider\u0002electric.com/en/download/document/M580_BMEH582040_SV3.10/",
"product_ids": [
"90"
],
"restart_required": {
"category": "none"
},
"url": "https://www.schneider-electric.com/en/download/document/M580_BMEH582040_SV3.10/"
},
{
"category": "vendor_fix",
"details": "A fix is available on Modicon M580 \r\nfirmware V3.10, find links to fixed \r\nversions in the Download Links \r\nsection\r\nBMEP584040S https://www.schneider\u0002electric.com/en/download/document/M580_BMEP584040S_SV3.10/",
"product_ids": [
"91"
],
"restart_required": {
"category": "none"
},
"url": "https://www.schneider-electric.com/en/download/document/M580_BMEP584040S_SV3.10/"
},
{
"category": "vendor_fix",
"details": "A fix is available on Modicon M580 \r\nfirmware V3.10, find links to fixed \r\nversions in the Download Links \r\nsection\r\nBMEH584040S https://www.schneider\u0002electric.com/en/download/document/M580_BMEH584040S_SV3.10/\r\n",
"product_ids": [
"92"
],
"restart_required": {
"category": "none"
},
"url": "https://www.schneider-electric.com/en/download/document/M580_BMEH584040S_SV3.10/"
},
{
"category": "vendor_fix",
"details": "A fix is available on Modicon M580 \r\nfirmware V3.10, find links to fixed \r\nversions in the Download Links \r\nsection\r\nBMEH586040S https://www.schneider-electric.com/en/download/document \r\n/M580_BMEH586040S_SV3.10/",
"product_ids": [
"93"
],
"restart_required": {
"category": "none"
},
"url": "https://www.schneider-electric.com/en/download/document%20/M580_BMEH586040S_SV3.10/"
},
{
"category": "vendor_fix",
"details": "A fix is available on Modicon M580 \r\nfirmware V3.10, find links to fixed \r\nversions in the Download Links \r\nsection\r\nBMEP582040S https://www.schneider\u0002electric.com/en/download/document/M580_BMEP582040S_SV3.10/",
"product_ids": [
"94"
],
"restart_required": {
"category": "none"
},
"url": "https://www.schneider-electric.com/en/download/document/M580_BMEP582040S_SV3.10/"
},
{
"category": "vendor_fix",
"details": "A fix is available in V1.5: \r\nhttps://www.se.com/ww/en/product\u0002range-download/62396-modicon\u0002mc80/?filter=business-1-industrial\u0002automation-and-control#/software\u0002firmware-ta",
"product_ids": [
"20"
],
"restart_required": {
"category": "none"
},
"url": "https://www.se.com/ww/en/product-range-download/62396-modicon-mc80/?filter=business-1-industrial-automation-and-control#/software-firmware-tab"
},
{
"category": "vendor_fix",
"details": "A fix is available in SV2.10 - \r\nhttps://www.se.com/ww/en/download\r\n/document/Momentum_FW_update/",
"product_ids": [
"21"
],
"restart_required": {
"category": "none"
},
"url": "https://www.se.com/ww/en/download/document/Momentum_FW_update/"
},
{
"category": "vendor_fix",
"details": "These models have reached their \r\nend of life. Please apply the \r\nmitigations proposed and/or upgrade \r\nto Modicon M580 offer. Contact your \r\nlocal technical support https://www.schneider-electric.com/en/work/support/contacts.jsp for more \r\ninformation.",
"product_ids": [
"22"
],
"restart_required": {
"category": "none"
},
"url": "https://www.schneider-electric.com/en/work/support/contacts.jsp"
},
{
"category": "vendor_fix",
"details": "A fix is available in V2.50, available \r\nhere for: \r\n140CRA31200\r\nhttps://www.se.com/ww/en/download\r\n/document/_140CRA31200_FW_and\r\n_FW_History",
"product_ids": [
"23"
],
"restart_required": {
"category": "none"
},
"url": "https://www.se.com/ww/en/download/document/_140CRA31200_FW_and_FW_History"
},
{
"category": "vendor_fix",
"details": "A fix is available in V2.50, available \r\nhere for:\r\n140CRA31908\r\nhttps://www.se.com/ww/en/download\r\n/document/_140CRA31908_FW_and\r\n_FW_History",
"product_ids": [
"79"
],
"restart_required": {
"category": "none"
},
"url": "https://www.se.com/ww/en/download/document/_140CRA31908_FW_and_FW_History"
},
{
"category": "mitigation",
"details": "These models have reached their \r\nend of life. Please apply the \r\nmitigations proposed and/or upgrade \r\nto Modicon M580 offer. Contact your \r\nlocal technical support https://www.schneider-electric.com/en/work/support/contacts.jsp for more \r\ninformation.",
"product_ids": [
"24"
],
"restart_required": {
"category": "none"
},
"url": "https://www.schneider-electric.com/en/work/support/contacts.jsp"
},
{
"category": "mitigation",
"details": "These models have reached their \r\nend of life in December 2018 and are \r\nno longer commercially\r\navailable. Please apply\r\nthe mitigations proposed and/or\r\nupgrade to IEC 61850 \r\ncommunication module \r\nBMENOP0300. Contact your local \r\ntechnical support https://www.schneider-electric.com/en/work/support/contacts.jsp for more \r\ninformation.\r\n",
"product_ids": [
"25"
],
"restart_required": {
"category": "none"
},
"url": "https://www.schneider-electric.com/en/work/support/contacts.jsp"
},
{
"category": "vendor_fix",
"details": "A fix is available in V8.16: \r\nhttps://www.eurotherm.com/?wpdmdl\r\n=28419",
"product_ids": [
"26"
],
"restart_required": {
"category": "none"
},
"url": "https://www.eurotherm.com/?wpdmdl=28419"
},
{
"category": "vendor_fix",
"details": "Firmware is available in Machine \r\nExpert 1.2 available in the following \r\nlink:\r\nhttps://www.se.com/ww/en/product\u0002range-download/2226-ecostruxure\u0002machine-expert/#/software-firmware\u0002tab",
"product_ids": [
"27"
],
"restart_required": {
"category": "none"
},
"url": "https://www.se.com/ww/en/product-range-download/2226-ecostruxure-machine-expert/#/software-firmware-tab"
},
{
"category": "mitigation",
"details": "Customers should immediately apply \r\nthe mitigations proposed in the \r\nmitigation section of this document \r\nand in the Cybersecurity Reference \r\nManual to reduce the risk of exploit:\r\nhttps://www.se.com/ww/en/download\r\n/document/EIO0000001999/ ",
"product_ids": [
"28"
],
"restart_required": {
"category": "none"
},
"url": "https://www.se.com/ww/en/download/document/EIO0000001999/"
},
{
"category": "vendor_fix",
"details": "Firmware update is available through \r\nGP-Pro EX software. GP-Pro EX is \r\navailable in the following link:\r\nhttps://www.proface.com/en/downloa\r\nd/update/gpproex/v409",
"product_ids": [
"111",
"126",
"127",
"128",
"129",
"130",
"131"
],
"restart_required": {
"category": "none"
},
"url": "https://www.proface.com/en/download/update/gpproex/v409"
},
{
"category": "vendor_fix",
"details": "Contact your local technical support https://www.schneider-electric.com/en/work/support/contacts.jsp \r\nor email supportTRSS@se.com for \r\nthe latest version.",
"product_ids": [
"31"
],
"restart_required": {
"category": "none"
},
"url": "https://www.schneider-electric.com/en/work/support/contacts.jsp"
},
{
"category": "vendor_fix",
"details": "Contact your local technical support https://www.schneider-electric.com/en/work/support/contacts.jsp \r\nor email supportTRSS@se.com for \r\nthe latest version.",
"product_ids": [
"32"
],
"restart_required": {
"category": "none"
},
"url": "https://www.schneider-electric.com/en/work/support/contacts.jsp"
},
{
"category": "vendor_fix",
"details": "A fix is available in V7.0.36 SY\u00021101207_G18. Contact your local \r\ntechnical support https://pasupport.schneider-electric.com/ for more \r\ninformation.",
"product_ids": [
"33"
],
"restart_required": {
"category": "none"
},
"url": "https://pasupport.schneider-electric.com/"
},
{
"category": "vendor_fix",
"details": "Contact your local technical support:\r\nhttps://pasupport.schneider\u0002electric.com",
"product_ids": [
"34",
"35"
],
"restart_required": {
"category": "none"
},
"url": "https://pasupport.schneider-electric.com/"
},
{
"category": "vendor_fix",
"details": "Contact your local Eurotherm \r\ntechnical support https://www.eurotherm.com/en/support to obtain firmware \r\nV2.41. ",
"product_ids": [
"36"
],
"restart_required": {
"category": "none"
},
"url": "https://www.eurotherm.com/en/support"
},
{
"category": "vendor_fix",
"details": "Contact your local technical support https://www.schneider-electric.com/en/work/support/contacts.jsp \r\nor the Energy Application Center \r\n(EAC) for assistance in upgrading to \r\nthe new version.",
"product_ids": [
"37",
"38",
"39",
"40",
"41",
"42",
"51"
],
"restart_required": {
"category": "none"
},
"url": "https://www.schneider-electric.com/en/work/support/contacts.jsp"
},
{
"category": "vendor_fix",
"details": "Firmware version: V01 Release: \r\n200.008 Release date: 15th Nov \r\n2019 Please Contact your local \r\ntechnical support https://www.schneider-electric.com/en/work/support/contacts.jsp for assistance.\r\n",
"product_ids": [
"43"
],
"restart_required": {
"category": "none"
},
"url": "https://www.schneider-electric.com/en/work/support/contacts.jsp"
},
{
"category": "vendor_fix",
"details": "Contact your local technical support https://www.schneider-electric.com/en/work/support/contacts.jsp \r\nor the Energy Application Center \r\n(EAC) for assistance in upgrading to \r\nthe new version \u2013 2.7.",
"product_ids": [
"44"
],
"restart_required": {
"category": "none"
},
"url": "https://www.schneider-electric.com/en/work/support/contacts.jsp"
},
{
"category": "vendor_fix",
"details": "https://www.se.com/us/en/download/document/ION7400_meter_FW_v002.002.001/",
"product_ids": [
"45"
],
"restart_required": {
"category": "none"
},
"url": "https://www.se.com/us/en/download/document/ION7400_meter_FW_v002.002.001/"
},
{
"category": "vendor_fix",
"details": "V002.002.001\r\nhttps://www.se.com/ca/en/download/\r\ndocument/ION7400_MID_meter_FW\r\n_v2.2.1/",
"product_ids": [
"46"
],
"restart_required": {
"category": "none"
},
"url": "https://www.se.com/ca/en/download/document/ION7400_MID_meter_FW_v2.2.1/"
},
{
"category": "vendor_fix",
"details": "https://www.se.com/us/en/download/document/ION9000_meter_FW_v002.002.001/",
"product_ids": [
"47"
],
"restart_required": {
"category": "none"
},
"url": "https://www.se.com/us/en/download/document/ION9000_meter_FW_v002.002.001/"
},
{
"category": "vendor_fix",
"details": "https://www.se.com/us/en/download/document/PM8000_meter_FW_v002.002.001/",
"product_ids": [
"48"
],
"restart_required": {
"category": "none"
},
"url": "https://www.se.com/us/en/download/document/PM8000_meter_FW_v002.002.001/"
},
{
"category": "vendor_fix",
"details": "V002.002.001\r\nhttps://www.se.com/ca/en/download/\r\ndocument/PM8000_MID_meter_FW_\r\nv2.2.1/",
"product_ids": [
"49"
],
"restart_required": {
"category": "none"
},
"url": "https://www.se.com/ca/en/download/document/PM8000_MID_meter_FW_v2.2.1/"
},
{
"category": "vendor_fix",
"details": "https://www.sage-rtu.com/updates/c3414-500-s02k4-firmware-release",
"product_ids": [
"50"
],
"restart_required": {
"category": "none"
},
"url": "https://www.sage-rtu.com/updates/c3414-500-s02k4-firmware-release"
},
{
"category": "vendor_fix",
"details": "Download version\r\nTeSysisland_002.100.013.sedp (02.0\r\n100) or later version.\r\nDownload link:\r\nhttps://www.se.com/us/en/download/\r\ndocument/TeSysisland_002.100.013.\r\nzip/ (also available via SoMove with \r\nthe installed DTM)\r\n",
"product_ids": [
"52"
],
"restart_required": {
"category": "none"
},
"url": "https://www.se.com/us/en/download/document/TeSysisland_002.100.013.zip/"
}
]
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…