Skip to content
Sign in
7.5 High

CVE-2022-45788 A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code…

Description

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when a malicious project file is loaded onto the controller. Affected Products: EcoStruxure Control Expert (All Versions), EcoStruxure Process Expert (All Versions), Modicon M340 CPU - part numbers BMXP34* (All Versions), Modicon M580 CPU - part numbers BMEP* and BMEH* (All Versions), Modicon M580 CPU Safety - part numbers BMEP58*S and BMEH58*S (All Versions), Modicon Momentum Unity M1E Processor - 171CBU* (All Versions), Modicon MC80 - BMKC80 (All Versions), Legacy Modicon Quantum - 140CPU65* and Premium CPUs - TSXP57* (All Versions)

Affected products and versions

Product Affected versions Fixed in
EcoStruxure Control Expert Versions not published
EcoStruxure Process Expert Versions not published
Modicon M340 CPU (part numbers BMXP34*) Versions not published
Modicon M580 CPU (part numbers BMEP* and BMEH*) Versions not published
Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) Versions not published
Modicon Momentum Unity M1E Processor (171CBU*) Versions not published
Modicon MC80 (BMKC80) Versions not published
Legacy Modicon Quantum (140CPU65*) and Premium CPUs (TSXP57*) Versions not published

Other CVEs of EcoStruxure Control Expert

The 12 CVEs of EcoStruxure Control Expert →
CVE-2023-27975 CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause unauthorized access to the project… 7.1 High CVE-2023-6408 CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists… 8.1 High CVE-2023-6409 CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to a project file… 7.7 High CVE-2023-1548 A CWE-269: Improper Privilege Management vulnerability exists that could cause a local user to perform a denial of… 5.5 Medium
Track this CVE