In Modicon Quantum all firmware versions, a CWE-94: Code Injection vulnerability could cause an unauthorized firmware modification with possible Denial of Service when using Modbus protocol.
https://www.schneider-electric.com/en/download/document/SEVD-2019-134-09/