CVE-2022-34760: A CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') vulnerabi

A CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability exists that could cause a denial of service of the webserver due to improper handling of the cookies

Status

Published

2022-07-13

Updated

2024-09-17

Assigning organization

schneider

Description

A CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability exists that could cause a denial of service of the webserver due to improper handling of the cookies. Affected Products: X80 advanced RTU Communication Module (BMENOR2200H) (V1.0), OPC UA Modicon Communication Module (BMENUA0100) (V1.10 and prior)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric OPC UA Modicon Communication Module

BMENUA0100 to < V1.10affected

Schneider Electric X80 advanced RTU Communication Module

BMENOR2200H V1.0affected

References

https://download.schneider-electric.com/files?p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-193-01_OPC_UA_X80_Advanced_RTU_Modicon_Communication_Modules+_Security_Notification.pdf ↗