VDB

CNVD-2022-68926

CNVD-2022-68926 PUBLISHED

Schneider Electric Modicon Quantum和Schneider Electric Modicon M340都是法国施耐德电气(Schneider Electric)公司的产品。Schneider Electric Modicon Quantum是一款用于过程应用、高可用性和安全解决方案的大型可编程逻辑控制器(PLC)。Schneider Electric Modicon M340是一款用于工业过程和基础设施的中程PLC(可编程逻辑控制器)。 Schneider Electric多款产品存在越界写漏洞,攻击者可利用该漏洞向设备的Web服务器发送特制HTTP请求,导致拒绝服务。

Affected Products

VendorProductVersions
cnvdSchneider Electric Modicon M340 X80 Ethernet Communication Modules BMXNOR0200H RTU(All Versions)
cnvdSchneider Electric Modicon M340 CPUs BMXP34 (<=3.40)
cnvdSchneider Electric Modicon Quantum Communication Modules TSXETY5103(All Versions)
Schneider Electric Modicon M340 X80 Ethernet Communication Modules BMXNOR0200H RTU(All Versions)
Schneider Electric Modicon Premium Processors with integrated Ethernet (Copro) 140CPU65xxxxx(All Versions)
Schneider Electric Modicon Quantum Communication Modules 140NOC78x00
cnvdSchneider Electric Modicon Quantum Communication Modules 140NOE771x1
Schneider Electric Modicon M340 X80 Ethernet Communication Modules BMXNOE0100(H)
Schneider Electric Modicon M340 CPUs BMXP34 (<=3.40)
Schneider Electric Modicon M340 X80 Ethernet Communication Modules BMXNOC0401
cnvdSchneider Electric Modicon Quantum Communication Modules 140NOC77101(All Versions)
cnvdSchneider Electric Modicon M340 X80 Ethernet Communication Modules BMXNOC0401
Schneider Electric Modicon M340 X80 Ethernet Communication Modules BMXNOE0110(H)
Schneider Electric Modicon Premium Processors with integrated Ethernet (Copro) TSXP575634
Schneider Electric Modicon Quantum Communication Modules 140NOE771x1
cnvdSchneider Electric Modicon Premium Processors with integrated Ethernet (Copro) 140CPU65xxxxx(All Versions)
Schneider Electric Modicon Quantum Communication Modules TSXETY4103
cnvdSchneider Electric Modicon Premium Processors with integrated Ethernet (Copro) TSXP575634
cnvdSchneider Electric Modicon Quantum Communication Modules 140NOC78x00
Schneider Electric Modicon Premium Processors with integrated Ethernet (Copro) TSXP576634(All Versions)

…and 8 more

Timeline

  • Feb 15, 2022 CVE ID Reserved
  • Feb 15, 2022 CVE Updated
  • Oct 14, 2022 CVE Published
Open in Interactive Console →
$ Console Community · 100/wk Open console ›