Modicon M340, Momentum, and MC80 Controllers Security Notification

This document details multiple vulnerabilities (CVE-2024-8936, CVE-2024-8937, CVE-2024-8938) in Schneider Electric's Modicon M340, Momentum, and MC80 controllers, including improper input validation and memory buffer issues that could lead to denial of service, arbitrary code execution, or loss of confidentiality. It provides remediation steps (firmware updates to SV3.65 or SV2.80) and mitigations such as network segmentation, firewall configuration, and VPN use to reduce exploitation risk.