Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-37301

A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
schneider

Description

A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus TCP protocol. Affected products: Modicon M340 CPU (part numbers BMXP34*)(V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*)(V3.22 and prior), Legacy Modicon Quantum/Premium(All Versions), Modicon Momentum MDI (171CBU*)(All Versions), Modicon MC80 (BMKC80)(V1.7 and prior)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric Modicon M340 CPU (part numbers BMXP34*)

  • V to ≤ 3.40affected

Schneider Electric Modicon M580 CPU (part numbers BMEP* and BMEH*)

  • V to ≤ 3.22affected

Schneider Electric Legacy Modicon Quantum/Premium

  • All Versionsaffected

Schneider Electric Modicon Momentum MDI (171CBU*)

  • All Versionsaffected

Schneider Electric Modicon MC80 (BMKC80)

  • V to ≤ 1.7affected

References