Description (CNA)
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a potential arbitrary code execution after a successful Man-In-The-Middle attack followed by sending a crafted Modbus function call to tamper with memory area involved in memory size computation.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Schneider Electric / Modicon M340 CPU (part numbers BMXP34*) | affected Versions prior to SV3.65 |
| Schneider Electric / Modicon MC80 (part numbers BMKC80) | affected All versions |
| Schneider Electric / Modicon Momentum Unity M1E Processor (171CBU*) | affected All Versions |
CWE
CWE-119
References
ADP enrichment
No English description supplied.
No references supplied.