CVE-2022-37301
A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus TCP protocol.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.73%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus TCP protocol. Affected products: Modicon M340 CPU (part numbers BMXP34*)(V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*)(V3.22 and prior), Legacy Modicon Quantum/Premium(All Versions), Modicon Momentum MDI (171CBU*)(All Versions), Modicon MC80 (BMKC80)(V1.7 and prior)
- CVSS 3.1
- 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.73% probability · 52th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-191
- Affected
- schneider-electric/modicon m340 bmx p34-2010 firmware · schneider-electric/modicon m340 bmx p34-2030 firmware · schneider-electric/modicon m580 bmeh582040 firmware · schneider-electric/modicon m580 bmeh582040c firmware · schneider-electric/modicon m580 bmeh582040s firmware · schneider-electric/modicon m580 bmeh584040 firmware · schneider-electric/modicon m580 bmeh584040c firmware · schneider-electric/modicon m580 bmeh584040s firmware · schneider-electric/modicon m580 bmeh586040 firmware · schneider-electric/modicon m580 bmeh586040c firmware · schneider-electric/modicon m580 bmeh586040s firmware · schneider-electric/modicon m580 bmep581020 firmware · schneider-electric/modicon m580 bmep581020h firmware · schneider-electric/modicon m580 bmep582020 firmware · schneider-electric/modicon m580 bmep582020h firmware · schneider-electric/modicon m580 bmep582040 firmware · schneider-electric/modicon m580 bmep582040h firmware · schneider-electric/modicon m580 bmep582040s firmware · schneider-electric/modicon m580 bmep583020 firmware · schneider-electric/modicon m580 bmep583040 firmware · +28 more
- Source
- cybersecurity@se.com
References
- https://www.se.com/us/en/download/document/SEVD-2022-221-02/Vendor Advisory
- https://www.se.com/us/en/download/document/SEVD-2022-221-02/Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.