Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2022-45789

A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbus functions on the controller when hijacking an authenticate

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
schneider

Description

A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbus functions on the controller when hijacking an authenticated Modbus session. Affected Products: EcoStruxure Control Expert (All Versions), EcoStruxure Process Expert (All Versions), Modicon M340 CPU - part numbers BMXP34* (All Versions), Modicon M580 CPU - part numbers BMEP* and BMEH* (All Versions), Modicon M580 CPU Safety - part numbers BMEP58*S and BMEH58*S (All Versions)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric EcoStruxure Control Expert

Default version status: unaffected

  • All Versionsaffected

Schneider Electric EcoStruxure Process Expert

Default version status: unaffected

  • All Versionsaffected

Schneider Electric Modicon M340 CPU (part numbers BMXP34*)

Default version status: unaffected

  • All Versionsaffected

Schneider Electric Modicon M580 CPU (part numbers BMEP* and BMEH*)

Default version status: unaffected

  • All Versionsaffected

Schneider Electric Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S)

Default version status: unaffected

  • All Versionsaffected

References