7.5
High
CVE-2021-22786 A CWE-200: Information Exposure vulnerability exists that could cause the exposure of sensitive information stored on…
Description
A CWE-200: Information Exposure vulnerability exists that could cause the exposure of sensitive information stored on the memory of the controller when communicating over the Modbus TCP protocol. Affected Products: Modicon M340 CPU (part numbers BMXP34*) (Versions prior to V3.30), Modicon M580 CPU (part numbers BMEP* and BMEH*) (Versions prior to SV3.20), Modicon MC80 (BMKC80) (Versions prior to V1.6), Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) (All Versions), Modicon Momentum MDI (171CBU*) (Versions prior to V2.3), Legacy Modicon Quantum (All Versions)
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Modicon M340 CPU (part numbers BMXP34*) 3.30 | earliest → < 3.30 | 3.30 |
| Modicon M580 CPU (part numbers BMEP* and BMEH*) 3.20 | earliest → < 3.20 | 3.20 |
| Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) | Versions not published | |
| Modicon MC80 (BMKC80) 1.6 | earliest → < 1.6 | 1.6 |
| Modicon Momentum CPU (171CBU*) 2.3 | earliest → < 2.3 | 2.3 |
| Legacy Modicon Quantum | Versions not published |
Other CVEs of Modicon M340 CPU (part numbers BMXP34*)
The 12 CVEs of Modicon M340 CPU (part numbers BMXP34*) →
CVE-2024-8936
CWE-20: Improper Input Validation vulnerability exists that could lead to loss of confidentiality of controller memory…
8.3
High
CVE-2024-8938
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a…
9.2
Critical
CVE-2024-8937
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a…
8.3
High
CVE-2024-8935
CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause a denial of service and loss of…
7.7
High