← CVE Intelligence

CVE-2022-37301

Schneider Electric / Modicon M340 CPU (part numbers BMXP34*) PUBLISHED

Description (CNA)

A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus TCP protocol. Affected products: Modicon M340 CPU (part numbers BMXP34*)(V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*)(V3.22 and prior), Legacy Modicon Quantum/Premium(All Versions), Modicon Momentum MDI (171CBU*)(All Versions), Modicon MC80 (BMKC80)(V1.7 and prior)

Affected (CNA)

Vendor / productVersions
Schneider Electric / Modicon M340 CPU (part numbers BMXP34*)affected V through 3.40
Schneider Electric / Modicon M580 CPU (part numbers BMEP* and BMEH*) affected V through 3.22
Schneider Electric / Legacy Modicon Quantum/Premiumaffected All Versions
Schneider Electric / Modicon Momentum MDI (171CBU*)affected All Versions
Schneider Electric / Modicon MC80 (BMKC80)affected V through 1.7

CWE

CWE-191

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.