5.3
Medium
CVE-2022-24323 A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a disruption of…
Description
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a disruption of communication between the Modicon controller and the engineering software, when an attacker is able to intercept and manipulate specific Modbus response data. Affected Product: EcoStruxure Process Expert (V2021 and prior), EcoStruxure Control Expert (V15.0 SP1 and prior)
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| EcoStruxure Process Expert | Versions not published | |
| EcoStruxure Control Expert | Versions not published |
Other CVEs of EcoStruxure Process Expert
The 9 CVEs of EcoStruxure Process Expert →
CVE-2025-0327
CWE-269: Improper Privilege Management vulnerability exists for two services (of which one managing audit trail data and…
8.5
High
CVE-2023-27975
CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause unauthorized access to the project…
7.1
High
CVE-2023-6408
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists…
8.1
High
CVE-2023-6409
CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to a project file…
7.7
High