Security notification – Modicon™ Quantum PLC (ICS-ALERT-12-020-03B)



Release Notice

Schneider Electric® has become aware of the release of a metasploit module allowing a user to send a stop command to or modify the PLC program of a Modicon Quantum PLC

Goals and Symptoms

The ability to send commands from Unity Pro software or over UMAS to the controller was already identified in ICS-ALERT-12-020-03 and a response is available in Schneider Electric Resolution 207378. This resolution expands on that.

Causes and Fixes

Follow the recommendations found in the attached document.


(Removed File URL: 207906_2C46/ Image URL: /PubResEXPORT.nsf/2b87ee90be777fc085257c28006ee4ef/179bc9a6038b58f5c1257a5600529792/fl_block_5/0.DC?OpenElement&FieldElemFormat=gif)

Legacy KB System (APS) Data: RESL207906 V3.0, Originally authored by MiKe on 04/14/2012, Last Edited by MiKe on 08/10/2012
Related ranges: Modicon Quantum NOE - TR