Skip to content
Sign in
5.9 Medium

CVE-2022-34762 A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could…

Description

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause unauthorized firmware image loading when unsigned images are added to the firmware image path. Affected Products: X80 advanced RTU Communication Module (BMENOR2200H) (V2.01 and later), OPC UA Modicon Communication Module (BMENUA0100) (V1.10 and prior)

Affected products and versions

Product Affected versions Fixed in
OPC UA Modicon Communication Module 1.10 earliest → < 1.10 1.10
X80 advanced RTU Communication Module 2.01 2.01 → latest No fix stated

Other CVEs of OPC UA Modicon Communication Module

The 7 CVEs of OPC UA Modicon Communication Module →
CVE-2022-34765 A CWE-73: External Control of File Name or Path vulnerability exists that could cause loading of unauthorized firmware… 5.5 Medium CVE-2022-34764 A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause… 5.9 Medium CVE-2022-34763 A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could cause loading of… 5.9 Medium CVE-2022-34761 A CWE-476: NULL Pointer Dereference vulnerability exists that could cause a denial of service of the webserver when… 7.5 High
Track this CVE