CVE-2021-22816
High
Description
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a Denial of Service of the RTU when receiving a specially crafted request over Modbus, and the RTU is configured as a Modbus server. Affected Products: SCADAPack 312E, 313E, 314E, 330E, 333E, 334E, 337E, 350E and 357E RTUs with firmware V8.18.1 and prior
SeverityHigh
CVSS7.5
Exploit probability—
ProductSchneider-electric Scadapack 312e Firmware
PublishedJan 28, 2022
First seenJan 28, 2022
How to fix
Update
- schneider-electric scadapack_312e_firmware8.19.1 or later
- schneider-electric scadapack_313e_firmware8.19.1 or later
- schneider-electric scadapack_314e_firmware8.19.1 or later
- schneider-electric scadapack_330e_firmware8.19.1 or later
- schneider-electric scadapack_333e_firmware8.19.1 or later
- schneider-electric scadapack_334e_firmware8.19.1 or later
- schneider-electric scadapack_337e_firmware8.19.1 or later
- schneider-electric scadapack_350e_firmware8.19.1 or later
- schneider-electric scadapack_357e_firmware8.19.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| schneider-electric scadapack_312e_firmware | v < 8.19.1 | 8.19.1 |
| schneider-electric scadapack_313e_firmware | v < 8.19.1 | 8.19.1 |
| schneider-electric scadapack_314e_firmware | v < 8.19.1 | 8.19.1 |
| schneider-electric scadapack_330e_firmware | v < 8.19.1 | 8.19.1 |
| schneider-electric scadapack_333e_firmware | v < 8.19.1 | 8.19.1 |
| schneider-electric scadapack_334e_firmware | v < 8.19.1 | 8.19.1 |
| schneider-electric scadapack_337e_firmware | v < 8.19.1 | 8.19.1 |
| schneider-electric scadapack_350e_firmware | v < 8.19.1 | 8.19.1 |
| schneider-electric scadapack_357e_firmware | v < 8.19.1 | 8.19.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.