Back to feed
EUVD-2022-48645 · Published Jan 31, 2023
A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbus functions on the controller when hijacking an authenticated Modbus session. Affected Products: EcoStruxure Control Expert (All Versions), EcoStruxure Process Expert (All Versions), Modicon M340 CPU - part numbers BMXP34* (All Versions), Modicon M580 CPU - part numbers BMEP* and BMEH* (All Versions), Modicon M580 CPU Safety - part numbers BMEP58*S and BMEH58*S (All Versions)
Technologies
Schneider-Electric Modicon M580 Bmep585040C FirmwareSchneider-Electric Modicon M580 Bmeh584040C FirmwareSchneider-Electric Modicon M580 Bmeh586040Schneider-Electric Modicon M580 Bmeh586040S FirmwareSchneider-Electric Modicon M340 Bmxp3420302H FirmwareSchneider-Electric Modicon M580 Bmep582040SSchneider-Electric Modicon M580 Bmep584040 FirmwareSchneider-Electric Modicon M580 Bmeh584040SSchneider-Electric Modicon M580 Bmeh584040 FirmwareSchneider-Electric Modicon M580 Bmep582020HSchneider-Electric Modicon M340 Bmxp342000 FirmwareSchneider-Electric Modicon M580 Bmep581020Schneider-Electric Modicon M580 Bmep581020H FirmwareSchneider-Electric Modicon M340 Bmxp342030Schneider-Electric Modicon M580 Bmeh582040Schneider-Electric Modicon M580 Bmep582040S FirmwareSchneider-Electric Modicon M580 Bmeh584040S FirmwareSchneider-Electric Modicon M340 Bmxp342010Schneider-Electric Modicon M580 Bmep582020H FirmwareSchneider-Electric Modicon M580 Bmep582040 FirmwareSchneider-Electric Modicon M580 Bmeh586040SSchneider-Electric Modicon M580 Bmeh582040S FirmwareSchneider-Electric Modicon M580 Bmep584020Schneider-Electric Modicon M580 Bmep585040Schneider-Electric Modicon M580 Bmep583020Schneider-Electric Ecostruxure Control ExpertSchneider-Electric Modicon M580 Bmep584040SSchneider-Electric Modicon M580 Bmeh582040 FirmwareSchneider-Electric Modicon M340 Bmxp342000Schneider-Electric Modicon M580 Bmep582020Schneider-Electric Modicon M580 Bmep582020 FirmwareSchneider-Electric Modicon M580 Bmep586040 FirmwareSchneider-Electric Modicon M580 Bmeh582040SSchneider-Electric Modicon M580 Bmeh584040CSchneider-Electric Modicon M340 Bmxp342020HSchneider-Electric Modicon M580 Bmep583020 FirmwareSchneider-Electric Modicon M580 Bmep584040Schneider-Electric Modicon M580 Bmeh582040CSchneider-Electric Modicon M580 Bmeh582040C FirmwareSchneider-Electric Modicon M580 Bmep582040HSchneider-Electric Ecostruxure Process ExpertSchneider-Electric Modicon M340 Bmxp341000 FirmwareSchneider-Electric Modicon M340 Bmxp341000Schneider-Electric Modicon M340 Bmxp3420102Schneider-Electric Modicon M340 Bmxp342030HSchneider-Electric Modicon M580 Bmep581020 FirmwareSchneider-Electric Modicon M580 Bmep583040Schneider-Electric Modicon M340 Bmxp3420102 FirmwareSchneider-Electric Modicon M580 Bmep586040Schneider-Electric Modicon M580 Bmeh584040Schneider-Electric Modicon M580 Bmep582040Schneider-Electric Modicon M340 Bmxp3420302 FirmwareSchneider-Electric Modicon M580 Bmeh586040 FirmwareSchneider-Electric Modicon M340 Bmxp342020Schneider-Electric Modicon M340 Bmxp342020H FirmwareSchneider-Electric Modicon M580 Bmeh586040CSchneider-Electric Modicon M340 Bmxp342030 FirmwareSchneider-Electric Modicon M340 Bmxp3420302Schneider-Electric Modicon M340 Bmxp342030H FirmwareSchneider-Electric Modicon M580 Bmep586040C FirmwareSchneider-Electric Modicon M580 Bmep584040S FirmwareSchneider-Electric Modicon M580 Bmep585040 FirmwareSchneider-Electric Modicon M340 Bmxp3420302HSchneider-Electric Modicon M580 Bmep586040CSchneider-Electric Modicon M580 Bmep585040CSchneider-Electric Modicon M580 Bmep581020HSchneider-Electric Modicon M580 Bmep583040 FirmwareSchneider-Electric Modicon M340 Bmxp342010 FirmwareSchneider-Electric Modicon M580 Bmeh586040C FirmwareSchneider-Electric Modicon M340 Bmxp342020 FirmwareSchneider-Electric Modicon M580 Bmep584020 FirmwareSchneider-Electric Modicon M580 Bmep582040H Firmware
Weaknesses
CWE-294
CVSS scores
- v3.19.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
