CVEvulnerability

CVE-2022-37301

7.5 HIGH Published 2022-11-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-11-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-191

Description

A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus TCP protocol. Affected products: Modicon M340 CPU (part numbers BMXP34*)(V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*)(V3.22 and prior), Legacy Modicon Quantum/Premium(All Versions), Modicon Momentum MDI (171CBU*)(All Versions), Modicon MC80 (BMKC80)(V1.7 and prior)

Affected configurations

• schneider-electric modicon m340 bmx p34-2010 firmware (< 3.50) • schneider-electric modicon m340 bmx p34-2030 firmware (< 3.50) • schneider-electric modicon m580 bmeh582040 firmware (< 4.01) • schneider-electric modicon m580 bmeh582040c firmware (< 4.01) • schneider-electric modicon m580 bmeh582040s firmware (< 4.01) • schneider-electric modicon m580 bmeh584040 firmware (< 4.01) • schneider-electric modicon m580 bmeh584040c firmware (< 4.01) • schneider-electric modicon m580 bmeh584040s firmware (< 4.01) • schneider-electric modicon m580 bmeh586040 firmware (< 4.01) • schneider-electric modicon m580 bmeh586040c firmware (< 4.01) • schneider-electric modicon m580 bmeh586040s firmware (< 4.01) • schneider-electric modicon m580 bmep581020 firmware (< 4.01) • schneider-electric modicon m580 bmep581020h firmware (< 4.01) • schneider-electric modicon m580 bmep582020 firmware (< 4.01) • schneider-electric modicon m580 bmep582020h firmware (< 4.01) • schneider-electric modicon m580 bmep582040 firmware (< 4.01) • schneider-electric modicon m580 bmep582040h firmware (< 4.01) • schneider-electric modicon m580 bmep582040s firmware (< 4.01) • schneider-electric modicon m580 bmep583020 firmware (< 4.01) • schneider-electric modicon m580 bmep583040 firmware (< 4.01) • schneider-electric modicon m580 bmep584020 firmware (< 4.01) • schneider-electric modicon m580 bmep584040 firmware (< 4.01) • schneider-electric modicon m580 bmep584040s firmware (< 4.01) • schneider-electric modicon m580 bmep585040 firmware (< 4.01) • schneider-electric modicon m580 bmep585040c firmware (< 4.01) • schneider-electric modicon m580 bmep586040 firmware (< 4.01) • schneider-electric modicon m580 bmep586040c firmware (< 4.01) • schneider-electric modicon mc80 bmkc8020301 firmware (< 1.8) • schneider-electric modicon mc80 bmkc8020310 firmware (< 1.8) • schneider-electric modicon mc80 bmkc8030311 firmware (< 1.8) • schneider-electric modicon momentum 171cbu78090 firmware • schneider-electric modicon momentum 171cbu98090 firmware • schneider-electric modicon momentum 171cbu98091 firmware • schneider-electric modicon premium tsxp57 1634m firmware • schneider-electric modicon premium tsxp57 2634m firmware • schneider-electric modicon premium tsxp57 2834m firmware • schneider-electric modicon premium tsxp57 454m firmware • schneider-electric modicon premium tsxp57 4634m firmware • schneider-electric modicon premium tsxp57 554m firmware • schneider-electric modicon premium tsxp57 5634m firmware • schneider-electric modicon premium tsxp57 6634m firmware • schneider-electric modicon quantum 140cpu65150 firmware • schneider-electric modicon quantum 140cpu65150c firmware • schneider-electric modicon quantum 140cpu65160 firmware • schneider-electric modicon quantum 140cpu65160c firmware • schneider-electric modicon quantum 140noc78100 firmware • schneider-electric modicon quantum 140noe77101 firmware • schneider-electric modicon quantum 140noe77111 firmware

Related

Weakness · CWE (1)

  • CWE-191 Integer Underflow (Wrap or Wraparound) weakness

References