CVE-2022-34759: A CWE-787: Out-of-bounds Write vulnerability exists that could cause a deni

A CWE-787: Out-of-bounds Write vulnerability exists that could cause a denial of service of the webserver due to improper parsing of the HTTP Headers. Affected Products: X80 advanc

Status

Published

2022-07-13

Updated

2024-09-16

Assigning organization

schneider

Description

A CWE-787: Out-of-bounds Write vulnerability exists that could cause a denial of service of the webserver due to improper parsing of the HTTP Headers. Affected Products: X80 advanced RTU Communication Module (BMENOR2200H) (V1.0), OPC UA Modicon Communication Module (BMENUA0100) (V1.10 and prior)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric OPC UA Modicon Communication Module

BMENUA0100 to < V1.10affected

Schneider Electric X80 advanced RTU Communication Module

BMENOR2200H V1.0affected

References

https://download.schneider-electric.com/files?p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-193-01_OPC_UA_X80_Advanced_RTU_Modicon_Communication_Modules+_Security_Notification.pdf ↗