CVE-2022-37301
22.11.2022, 12:15
A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus TCP protocol. Affected products: Modicon M340 CPU (part numbers BMXP34*)(V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*)(V3.22 and prior), Legacy Modicon Quantum/Premium(All Versions), Modicon Momentum MDI (171CBU*)(All Versions), Modicon MC80 (BMKC80)(V1.7 and prior)
| Vendor | Product | Version |
|---|---|---|
| schneider-electric | modicon_m340_bmx_p34-2010_firmware | 𝑥 < 3.50 |
| schneider-electric | modicon_m340_bmx_p34-2030_firmware | 𝑥 < 3.50 |
| schneider-electric | modicon_m580_bmeh582040_firmware | 𝑥 < 4.01 |
| schneider-electric | modicon_m580_bmeh582040c_firmware | 𝑥 < 4.01 |
| schneider-electric | modicon_m580_bmeh582040s_firmware | 𝑥 < 4.01 |
| schneider-electric | modicon_m580_bmeh584040_firmware | 𝑥 < 4.01 |
| schneider-electric | modicon_m580_bmeh584040c_firmware | 𝑥 < 4.01 |
| schneider-electric | modicon_m580_bmeh584040s_firmware | 𝑥 < 4.01 |
| schneider-electric | modicon_m580_bmeh586040_firmware | 𝑥 < 4.01 |
| schneider-electric | modicon_m580_bmeh586040c_firmware | 𝑥 < 4.01 |
| schneider-electric | modicon_m580_bmeh586040s_firmware | 𝑥 < 4.01 |
| schneider-electric | modicon_m580_bmep581020_firmware | 𝑥 < 4.01 |
| schneider-electric | modicon_m580_bmep581020h_firmware | 𝑥 < 4.01 |
| schneider-electric | modicon_m580_bmep582020_firmware | 𝑥 < 4.01 |
| schneider-electric | modicon_m580_bmep582020h_firmware | 𝑥 < 4.01 |
| schneider-electric | modicon_m580_bmep582040_firmware | 𝑥 < 4.01 |
| schneider-electric | modicon_m580_bmep582040h_firmware | 𝑥 < 4.01 |
| schneider-electric | modicon_m580_bmep582040s_firmware | 𝑥 < 4.01 |
| schneider-electric | modicon_m580_bmep583020_firmware | 𝑥 < 4.01 |
| schneider-electric | modicon_m580_bmep583040_firmware | 𝑥 < 4.01 |
| schneider-electric | modicon_m580_bmep584020_firmware | 𝑥 < 4.01 |
| schneider-electric | modicon_m580_bmep584040_firmware | 𝑥 < 4.01 |
| schneider-electric | modicon_m580_bmep584040s_firmware | 𝑥 < 4.01 |
| schneider-electric | modicon_m580_bmep585040_firmware | 𝑥 < 4.01 |
| schneider-electric | modicon_m580_bmep585040c_firmware | 𝑥 < 4.01 |
| schneider-electric | modicon_m580_bmep586040_firmware | 𝑥 < 4.01 |
| schneider-electric | modicon_m580_bmep586040c_firmware | 𝑥 < 4.01 |
| schneider-electric | modicon_mc80_bmkc8020301_firmware | 𝑥 < 1.8 |
| schneider-electric | modicon_mc80_bmkc8020310_firmware | 𝑥 < 1.8 |
| schneider-electric | modicon_mc80_bmkc8030311_firmware | 𝑥 < 1.8 |
| schneider-electric | modicon_momentum_171cbu78090_firmware | - |
| schneider-electric | modicon_momentum_171cbu98090_firmware | - |
| schneider-electric | modicon_momentum_171cbu98091_firmware | - |
| schneider-electric | modicon_premium_tsxp57_1634m_firmware | - |
| schneider-electric | modicon_premium_tsxp57_2634m_firmware | - |
| schneider-electric | modicon_premium_tsxp57_2834m_firmware | - |
| schneider-electric | modicon_premium_tsxp57_454m_firmware | - |
| schneider-electric | modicon_premium_tsxp57_4634m_firmware | - |
| schneider-electric | modicon_premium_tsxp57_554m_firmware | - |
| schneider-electric | modicon_premium_tsxp57_5634m_firmware | - |
| schneider-electric | modicon_premium_tsxp57_6634m_firmware | - |
| schneider-electric | modicon_quantum_140cpu65150_firmware | - |
| schneider-electric | modicon_quantum_140cpu65150c_firmware | - |
| schneider-electric | modicon_quantum_140cpu65160_firmware | - |
| schneider-electric | modicon_quantum_140cpu65160c_firmware | - |
| schneider-electric | modicon_quantum_140noc78100_firmware | - |
| schneider-electric | modicon_quantum_140noe77101_firmware | - |
| schneider-electric | modicon_quantum_140noe77111_firmware | - |
𝑥
= Vulnerable software versions
Common Weakness Enumeration