Modicon M580 and Quantum Communication Modules VxWorks Vulnerability Security Notification

This security notification from Schneider Electric details a vulnerability in the Wind River VxWorks operating system affecting specific Modicon M580 and Quantum communication modules (BMENOC0321, BMECRA, BMXCRA, 140CRA31200, 140CRA31908). Successful exploitation could lead to stack overflow attacks, resulting in loss of confidentiality, integrity, and denial of service; the document provides remediations (firmware updates) and mitigations (firewall rules for UDP ports 67/68).