Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-34761

A CWE-476: NULL Pointer Dereference vulnerability exists that could cause a denial of service of the webserver when parsing JSON content type. Affected Products: X80 advanced RTU C

Description

A CWE-476: NULL Pointer Dereference vulnerability exists that could cause a denial of service of the webserver when parsing JSON content type. Affected Products: X80 advanced RTU Communication Module (BMENOR2200H) (V2.01 and later), OPC UA Modicon Communication Module (BMENUA0100) (V1.10 and prior)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric OPC UA Modicon Communication Module

  • BMENUA0100 to < V1.10affected

Schneider Electric X80 advanced RTU Communication Module

  • V2.01 to < BMENOR2200H*affected

References