Modicon

What is Modicon?

Modicon is the PLC family of Schneider Electric, ranging from compact machine controllers such as the M221 to the Ethernet-based M580 process platform, and also the name of the company that developed the first commercially successful PLC in the late 1960s. The name stands for MOdular DIgital CONtroller. Modicon controllers run worldwide in industrial automation, water management, energy and machine building. Within OT convergence they form the real-time control layer that communicates with SCADA, HMIs, field devices and higher IT layers. Modicon is also the birthplace of Modbus, the protocol you still find in countless plants.

🏭 How did Modicon originate?

In 1968 the engineering firm Bedford Associates was asked by GM Hydramatic, the transmission division of General Motors, to build an electronic replacement for hard-wired relay panels. Until then, every product change meant rewiring hundreds of relays. The team around Dick Morley delivered the 084, named after the firm’s 84th project. A separate company was set up for the new controller: Modicon.

The arrival of the PLC fundamentally changed plant architecture: logic became software, changes took hours instead of weeks, and faults could be traced with diagnostics rather than a test probe.

⚙️ Which Modicon ranges exist?

Schneider Electric broadly divides Modicon into machine controllers and process controllers (PACs). That split also determines the engineering software.

EcoStruxure Machine Expert (formerly SoMachine) is based on CODESYS. EcoStruxure Control Expert is the successor to Unity Pro. Both support the IEC 61131-3 languages: Ladder Diagram, Function Block Diagram, Structured Text and Sequential Function Chart. Instruction List still appears in old projects, but the third edition of the standard (2013) marked it as deprecated and the fourth edition (2025) removed it. For the associated operator panels Schneider uses Vijeo Designer, so in practice PLC logic and HMI screens are often maintained in two separate tools. Engineering features such as online changes, simulation and function block libraries let you modify a running plant without stopping the process.

🧠 How is a Modicon system built?

A typical Modicon process system consists of a CPU on a rack, local and O, communication modules and an engineering station. On the M580 the rack itself is an Ethernet backplane: I/O and network modules talk to the CPU over Ethernet. The M580 uses the same X80 I/O modules as the M340, which simplifies migration and spare parts management.

For high availability, the M580 and the older Quantum and Premium support a hot standby configuration: a second CPU runs in sync and takes over control on failure. Network redundancy uses ring topologies with RSTP or MRP. For functional safety there are M580 Safety variants under IEC 61508, allowing process and safety functions up to SIL 3 on a single platform.

🌐 Which protocols does a Modicon PLC speak?

Besides public Modbus, Schneider uses its proprietary UMAS protocol for engineering, carried over Modbus function code 90. Engineering tools use it to download programs, read memory and start or stop the CPU. That protocol is at the heart of several vulnerabilities.

🔐 Which security risks apply to Modicon?

Classic Modbus has no authentication, encryption or integrity checking: anyone who can reach port 502 can read and write registers. On top of that there are concrete incidents and vulnerabilities.

Watch out for a common mix-up: TRITON (2017) targeted Triconex safety systems, also from Schneider Electric, but not Modicon. Common attack paths into Modicon environments are unprotected engineering stations, external supplier connections, weak or default passwords and outdated firmware.

🛠️ How do you secure a Modicon environment in practice?

A workable approach in line with IEC 62443 and defence in depth:

1. Inventory - record the type, firmware version and network connections of every controller in an asset inventory.
2. Segment - place PLCs in their own zones behind an industrial firewall and route IT traffic through a DMZ (network segmentation, Purdue Model level 1).
3. Restrict services - disable unused services such as FTP, TFTP, HTTP and SNMP and use IP access lists on the CPU, as described in Schneider’s hardening guidance.
4. Protect the logic - use application passwords and memory protection so that a program cannot be changed without authorisation.
5. Secure remote access - only via VPN and a jump server with MFA, never directly.
6. Monitor - send events via Syslog to a SIEM and use passive monitoring that detects UMAS and Modbus write operations.
7. Patch in a planned way - follow Schneider’s security notifications and roll out updates through patch management and configuration management in maintenance windows.

Application whitelisting on engineering stations adds another layer, and the whole fits within a zero trust approach to supplier access.

🧪 What does a Modicon application in water treatment look like?

Water treatment is a classic application area. An M580 or M340 controls pumps, valves and variable frequency drives, monitors levels in basins, manages chemical dosing and collects alarms and energy data. Remote I/O stations are spread across the site and connected to the CPU via a fibre-optic ring, so a single broken cable does not stop the control system. The SCADA system in the central control room reads the process data via Modbus TCP or OPC UA and passes the measurement series on to a historian for reporting to the water board or drinking water company.

The requirements in such an environment are high availability (often hot standby), low and predictable latency for control loops, historical logging and secure remote access for on-call maintenance staff outside office hours. The same structure appears in building automation, tunnels and power distribution, just with different I/O and a different operator interface.

🇪🇺 What does Modicon mean for Dutch and EU organisations?

Modicon controllers serve as the OT core of critical infrastructure such as water, energy and tunnels. In the Netherlands, the Cybersecurity Act (Cyberbeveiligingswet), the Dutch transposition of NIS2, has applied since 15 August 2026 and requires essential and important entities to manage their OT risks and report incidents (see Cybersecurity Act Incident Reporting). For water boards, the OT security picture of the water sector is relevant, with CERT-WM as their CSIRT. Manufacturers and machine builders also face the Cyber Resilience Act: reporting of actively exploited vulnerabilities from 11 September 2026, full application from 11 December 2027.

A second concern is lifecycle. PLCs often run for 15 to 25 years and I/O even longer, while HMI PCs need replacing after 5 to 10 years. Schneider has ended sales of Quantum and Premium and names the M580 as the migration path, with reuse of existing Quantum I/O and applications. Plan such a migration within lifecycle management before spare parts and service dry up.

🔄 How does Modicon compare with other PLC brands?

❓ Frequently asked questions

What does the name Modicon stand for?

Modicon stands for MOdular DIgital CONtroller. The name was chosen in 1968 for the company that brought the first commercially successful PLC, the Modicon 084, to market. Today Modicon is a brand name of Schneider Electric.

Was Modicon really the first PLC?

The Modicon 084 from 1969 is widely regarded as the first commercially successful PLC. It was developed for GM Hydramatic as a replacement for hard-wired relay logic. Other manufacturers, such as Allen-Bradley, followed shortly afterwards with comparable controllers.

What is the difference between the Modicon M340 and M580?

The Modicon M340 is a modular PAC for mid-sized installations. The Modicon M580 has an Ethernet backplane, supports hot standby redundancy and Safety variants, and is aimed at large process plants. Both use X80 I/O modules and are programmed with EcoStruxure Control Expert.

Is Modicon’s Modbus still safe to use?

Modbus was developed by Modicon in 1979 and has no built-in authentication or encryption. Modbus can be used safely as long as its traffic stays within segmented OT zones, behind an industrial firewall and with monitoring of write commands. For new connections to IT, secured OPC UA is a better choice.

What should I do with an old Modicon Quantum?

Schneider Electric has ended sales of the Modicon Quantum and recommends migrating to the Modicon M580. An M580 can use existing Quantum I/O and import existing applications, which limits conversion time. As long as the Quantum keeps running, segmentation, spare parts and a planned migration date are essential.

Was TRITON an attack on Modicon PLCs?

No, TRITON targeted Triconex safety systems in 2017, a different Schneider Electric product brand. Modicon PLCs have, however, been targeted by the PIPEDREAM attack toolkit from 2022 and affected by vulnerabilities such as ModiPwn from 2021.

📌 In summary

Modicon is Schneider Electric’s PLC family and the birthplace of both the PLC and the Modbus protocol. From the compact M221 to the redundant M580, Modicon controls machines, water treatment plants and infrastructure. Because Modbus and UMAS have little built-in security, every Modicon environment needs segmentation, restricted services, protected logic, central logging and timely migration of legacy ranges such as Quantum.