Skip to content
Sign in
5.9 Medium

CVE-2022-34763 A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could cause loading of…

Description

A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could cause loading of unauthorized firmware images due to improper verification of the firmware signature. Affected Products: X80 advanced RTU Communication Module (BMENOR2200H) (V2.01 and later), OPC UA Modicon Communication Module (BMENUA0100) (V1.10 and prior)

Affected products and versions

Product Affected versions Fixed in
OPC UA Modicon Communication Module 1.10 earliest → < 1.10 1.10
X80 advanced RTU Communication Module 2.01 2.01 → latest No fix stated

Other CVEs of OPC UA Modicon Communication Module

The 7 CVEs of OPC UA Modicon Communication Module →
CVE-2022-34765 A CWE-73: External Control of File Name or Path vulnerability exists that could cause loading of unauthorized firmware… 5.5 Medium CVE-2022-34764 A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause… 5.9 Medium CVE-2022-34762 A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could… 5.9 Medium CVE-2022-34761 A CWE-476: NULL Pointer Dereference vulnerability exists that could cause a denial of service of the webserver when… 7.5 High
Track this CVE