Description
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when a malicious project file is loaded onto the controller by an authenticated user.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Schneider Electric Modicon M340 CPU (part numbers BMXP34*)
Default version status: unaffected
prior to SV3.51affected
Schneider Electric Modicon M580 CPU (part numbers BMEP* and BMEH*)
Default version status: unaffected
prior to V4.10affected
Schneider Electric Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S)
Default version status: unaffected
Allaffected
Schneider Electric Modicon Momentum Unity M1E Processor (171CBU*)
Default version status: unaffected
Allaffected
Schneider Electric Modicon MC80 (BMKC80)
Default version status: unaffected
Allaffected
Schneider Electric Legacy Modicon Quantum (140CPU65*)
Default version status: unaffected
Allaffected
Schneider Electric Legacy Modicon Premium CPUs (TSXP57*)
Default version status: unaffected
Allaffected