CVE-2022-37301
High
Description
A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus TCP protocol. Affected products: Modicon M340 CPU (part numbers BMXP34*)(V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*)(V3.22 and prior), Legacy Modicon Quantum/Premium(All Versions), Modicon Momentum MDI (171CBU*)(All Versions), Modicon MC80 (BMKC80)(V1.7 and prior)
SeverityHigh
CVSS7.5
Exploit probability—
ProductSchneider-electric Modicon M340 Bmx P34-2010 Firmware
PublishedNov 22, 2022
First seenNov 22, 2022
Weakness typeCWE-191CWE-191
How to fix
Update
- schneider-electric modicon_m340_bmx_p34-2010_firmware3.50 or later
- schneider-electric modicon_m340_bmx_p34-2030_firmware3.50 or later
- schneider-electric modicon_m580_bmeh582040_firmware4.01 or later
- schneider-electric modicon_m580_bmeh582040c_firmware4.01 or later
- schneider-electric modicon_m580_bmeh582040s_firmware4.01 or later
- schneider-electric modicon_m580_bmeh584040_firmware4.01 or later
- schneider-electric modicon_m580_bmeh584040c_firmware4.01 or later
- schneider-electric modicon_m580_bmeh584040s_firmware4.01 or later
- schneider-electric modicon_m580_bmeh586040_firmware4.01 or later
- schneider-electric modicon_m580_bmeh586040c_firmware4.01 or later
- schneider-electric modicon_m580_bmeh586040s_firmware4.01 or later
- schneider-electric modicon_m580_bmep581020_firmware4.01 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| schneider-electric modicon_m340_bmx_p34-2010_firmware | v < 3.50 | 3.50 |
| schneider-electric modicon_m340_bmx_p34-2030_firmware | v < 3.50 | 3.50 |
| schneider-electric modicon_m580_bmeh582040_firmware | v < 4.01 | 4.01 |
| schneider-electric modicon_m580_bmeh582040c_firmware | v < 4.01 | 4.01 |
| schneider-electric modicon_m580_bmeh582040s_firmware | v < 4.01 | 4.01 |
| schneider-electric modicon_m580_bmeh584040_firmware | v < 4.01 | 4.01 |
| schneider-electric modicon_m580_bmeh584040c_firmware | v < 4.01 | 4.01 |
| schneider-electric modicon_m580_bmeh584040s_firmware | v < 4.01 | 4.01 |
| schneider-electric modicon_m580_bmeh586040_firmware | v < 4.01 | 4.01 |
| schneider-electric modicon_m580_bmeh586040c_firmware | v < 4.01 | 4.01 |
| schneider-electric modicon_m580_bmeh586040s_firmware | v < 4.01 | 4.01 |
| schneider-electric modicon_m580_bmep581020_firmware | v < 4.01 | 4.01 |
| schneider-electric modicon_m580_bmep581020h_firmware | v < 4.01 | 4.01 |
| schneider-electric modicon_m580_bmep582020_firmware | v < 4.01 | 4.01 |
| schneider-electric modicon_m580_bmep582020h_firmware | v < 4.01 | 4.01 |
| schneider-electric modicon_m580_bmep582040_firmware | v < 4.01 | 4.01 |
| schneider-electric modicon_m580_bmep582040h_firmware | v < 4.01 | 4.01 |
| schneider-electric modicon_m580_bmep582040s_firmware | v < 4.01 | 4.01 |
| schneider-electric modicon_m580_bmep583020_firmware | v < 4.01 | 4.01 |
| schneider-electric modicon_m580_bmep583040_firmware | v < 4.01 | 4.01 |
| schneider-electric modicon_m580_bmep584020_firmware | v < 4.01 | 4.01 |
| schneider-electric modicon_m580_bmep584040_firmware | v < 4.01 | 4.01 |
| schneider-electric modicon_m580_bmep584040s_firmware | v < 4.01 | 4.01 |
| schneider-electric modicon_m580_bmep585040_firmware | v < 4.01 | 4.01 |
| schneider-electric modicon_m580_bmep585040c_firmware | v < 4.01 | 4.01 |
| schneider-electric modicon_m580_bmep586040_firmware | v < 4.01 | 4.01 |
| schneider-electric modicon_m580_bmep586040c_firmware | v < 4.01 | 4.01 |
| schneider-electric modicon_mc80_bmkc8020301_firmware | v < 1.8 | 1.8 |
| schneider-electric modicon_mc80_bmkc8020310_firmware | v < 1.8 | 1.8 |
| schneider-electric modicon_mc80_bmkc8030311_firmware | v < 1.8 | 1.8 |
| schneider-electric modicon_momentum_171cbu78090_firmware | No range specified | — |
| schneider-electric modicon_momentum_171cbu98090_firmware | No range specified | — |
| schneider-electric modicon_momentum_171cbu98091_firmware | No range specified | — |
| schneider-electric modicon_premium_tsxp57_1634m_firmware | No range specified | — |
| schneider-electric modicon_premium_tsxp57_2634m_firmware | No range specified | — |
| schneider-electric modicon_premium_tsxp57_2834m_firmware | No range specified | — |
| schneider-electric modicon_premium_tsxp57_454m_firmware | No range specified | — |
| schneider-electric modicon_premium_tsxp57_4634m_firmware | No range specified | — |
| schneider-electric modicon_premium_tsxp57_554m_firmware | No range specified | — |
| schneider-electric modicon_premium_tsxp57_5634m_firmware | No range specified | — |
| schneider-electric modicon_premium_tsxp57_6634m_firmware | No range specified | — |
| schneider-electric modicon_quantum_140cpu65150_firmware | No range specified | — |
| schneider-electric modicon_quantum_140cpu65150c_firmware | No range specified | — |
| schneider-electric modicon_quantum_140cpu65160_firmware | No range specified | — |
| schneider-electric modicon_quantum_140cpu65160c_firmware | No range specified | — |
| schneider-electric modicon_quantum_140noc78100_firmware | No range specified | — |
| schneider-electric modicon_quantum_140noe77101_firmware | No range specified | — |
| schneider-electric modicon_quantum_140noe77111_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.