Modicon PAC and PLC Controllers Information Exposure Vulnerability Security Notification

This document details a high-severity information exposure vulnerability (CVE-2021-22786) in multiple Schneider Electric Modicon PAC and PLC controllers, which could allow attackers to read sensitive memory contents such as application password hashes and project data via the Modbus TCP protocol. It provides firmware remediation versions and mitigation steps for affected products, including Modicon M340, M580, MC80, Momentum, and Legacy Quantum controllers.