7.5
Élevée
CVE-2022-37301 A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the…
Description
A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus TCP protocol. Affected products: Modicon M340 CPU (part numbers BMXP34*)(V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*)(V3.22 and prior), Legacy Modicon Quantum/Premium(All Versions), Modicon Momentum MDI (171CBU*)(All Versions), Modicon MC80 (BMKC80)(V1.7 and prior)
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Modicon M340 CPU (part numbers BMXP34*) 3.40 | premières → 3.40 | Pas de correctif indiqué |
| Modicon M580 CPU (part numbers BMEP* and BMEH*) 3.22 | premières → 3.22 | Pas de correctif indiqué |
| Legacy Modicon Quantum/Premium | Versions non publiées | |
| Modicon Momentum MDI (171CBU*) | Versions non publiées | |
| Modicon MC80 (BMKC80) 1.7 | premières → 1.7 | Pas de correctif indiqué |
Autres CVE de Modicon M340 CPU (part numbers BMXP34*)
Les 12 CVE de Modicon M340 CPU (part numbers BMXP34*) →
CVE-2024-8936
CWE-20: Improper Input Validation vulnerability exists that could lead to loss of confidentiality of controller memory…
8.3
Élevée
CVE-2024-8938
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a…
9.2
Critique
CVE-2024-8937
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a…
8.3
Élevée
CVE-2024-8935
CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause a denial of service and loss of…
7.7
Élevée