SEVD-2021-130-06 CODESYS Vulnerabilities Security Notification

This document is a security notification from Schneider Electric detailing multiple critical and high-severity vulnerabilities in the 3S CODESYS third-party component integrated into several of their products, including EcoStruxure Machine Expert, Modicon M218/M241/M251/M262, LMC PacDrive, HMISCU, ATV IMC, and SoMachine/SoMachine Motion. It provides affected product versions, specific CVE details (CVE-2020-10245, CVE-2020-6081, CVE-2019-13538, CVE-2019-9008, CVE-2019-9009, CVE-2020-7052) with CVSS scores, and remediation steps such as firmware updates and network mitigation strategies to prevent denial of service and remote code execution.