Modicon PLC and PAC Denial-of-Service Vulnerabilities Security Notification

This document details multiple denial-of-service vulnerabilities (CVE-2023-25619 and CVE-2023-25620) affecting Schneider Electric Modicon PLCs and PACs, including M340, M580, Momentum, MC80, Quantum, and Premium models. It provides firmware remediation versions and mitigations such as network segmentation, application passwords, and file encryption to protect against exploits over Modbus TCP or via malicious project files.