Modicon Controllers Security Notification (CVE-2017-6028)

This document details a high-severity vulnerability (CVE-2017-6028) in Schneider Electric's Modicon Controllers, where login credentials are transmitted over the network in cleartext Base64 encoding, potentially allowing attackers to perform unauthorized operations. It lists affected products including Modicon M241, M251, Quantum, Premium, M340, and Momentum controllers, and provides remediation steps such as firmware updates and disabling web services.