VDB
BDU%3A2023-02966
BDU%3A2023-02966
PUBLISHED
CVSS 7.5 HIGH
Уязвимость реализации протокола Modbus TCP микропрограммного обеспечения программируемых логических контроллеров Schneider Electric Modicon, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Schneider Electric | Modicon Momentum Unity M1E Processor (171CBU*) | All |
| Schneider Electric | Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) | All |
| Schneider Electric | Modicon MC80 (BMKC80) | * |
| Schneider Electric | Legacy Modicon Quantum (140CPU65*) | All |
| Schneider Electric | Legacy Modicon Premium CPUs (TSXP57*) | All |
| Schneider Electric | Modicon M580 CPU (part numbers BMEP* and BMEH*) | prior to V4.10 |
| Schneider Electric | Modicon M340 CPU BMXP34, Modicon M580 CPU, Modicon M580 CPU Safety, Modicon Momentum Unity M1E Processor, Modicon MC80 (BMKC80), Legacy Modicon Premium CPUs | |
| Schneider Electric | Modicon M340 CPU (part numbers BMXP34*) | prior to SV3.51 |
Timeline
- May 31, 2023 CVE Published