Modicon M340, Premium, and Quantum Controllers Security Notification

This document details multiple high-severity vulnerabilities (CVE-2019-6852 and CVE-2019-6859) in Schneider Electric's Modicon M340, Premium, and Quantum controllers, involving the exposure of hardcoded FTP credentials via the web server. It provides remediation steps including network segmentation, firewall rules, and deactivation of FTP/HTTP ports, and recommends migrating end-of-life Premium and Quantum controllers to the Modicon M580 ePAC.