CVEvulnerability

CVE-2022-34765

5.3 MEDIUM Published 2022-07-13 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-07-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-668, CWE-73

Description

A CWE-73: External Control of File Name or Path vulnerability exists that could cause loading of unauthorized firmware images when user-controlled data is written to the file path. Affected Products: X80 advanced RTU Communication Module (BMENOR2200H) (V2.01 and later), OPC UA Modicon Communication Module (BMENUA0100) (V1.10 and prior)

Affected configurations

• schneider-electric opc ua module for m580 firmware (<= 1.10) • schneider-electric x80 advanced rtu module firmware (>= 2.01)

Related

Weakness · CWE (2)

  • CWE-668 Exposure of Resource to Wrong Sphere weakness
  • CWE-73 External Control of File Name or Path weakness

References