CVE-2022-37300
A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists that could cause unauthorized access in read and write mode to the controller when communicating over Modbus.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.75%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists that could cause unauthorized access in read and write mode to the controller when communicating over Modbus. Affected Products: EcoStruxure Control Expert Including all Unity Pro versions (former name of EcoStruxure Control Expert) (V15.0 SP1 and prior), EcoStruxure Process Expert, Including all versions of EcoStruxure Hybrid DCS (former name of EcoStruxure Process Expert) (V2021 and prior), Modicon M340 CPU (part numbers BMXP34*) (V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*) (V3.20 and prior).
- CVSS 3.1
- 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.75% probability · 53th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-640
- Affected
- schneider-electric/ecostruxure control expert · schneider-electric/ecostruxure process expert · schneider-electric/modicon m340 bmxp341000 firmware · schneider-electric/modicon m340 bmxp342000 firmware · schneider-electric/modicon m340 bmxp342010 firmware · schneider-electric/modicon m340 bmxp3420102 firmware · schneider-electric/modicon m340 bmxp342020 firmware · schneider-electric/modicon m340 bmxp342020h firmware · schneider-electric/modicon m340 bmxp342030 firmware · schneider-electric/modicon m340 bmxp3420302 firmware · schneider-electric/modicon m340 bmxp3420302h firmware · schneider-electric/modicon m340 bmxp342030h firmware · schneider-electric/modicon m580 bmeh582040 firmware · schneider-electric/modicon m580 bmeh582040c firmware · schneider-electric/modicon m580 bmeh582040s firmware · schneider-electric/modicon m580 bmeh584040 firmware · schneider-electric/modicon m580 bmeh584040c firmware · schneider-electric/modicon m580 bmeh584040s firmware · schneider-electric/modicon m580 bmeh586040 firmware · schneider-electric/modicon m580 bmeh586040c firmware · +16 more
- Source
- cybersecurity@se.com
References
- https://www.se.com/us/en/download/document/SEVD-2022-221-01/Patch, Vendor Advisory
- https://www.se.com/us/en/download/document/SEVD-2022-221-01/Patch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.