CVE-2022-34760 | Vulnetix

CVE-2022-34760 PUBLISHED CVSS 7.5 HIGH

Reported by schneider · Published July 13, 2022

A CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability exists that could cause a denial of service of the webserver due to improper handling of the cookies. Affected Products: X80 advanced RTU Communication Module (BMENOR2200H) (V1.0), OPC UA Modicon Communication Module (BMENUA0100) (V1.10 and prior)

Risk scores

CVSS 3.1

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Vendor	Product	Versions
Schneider Electric	OPC UA Modicon Communication Module	BMENUA0100
Schneider Electric	X80 advanced RTU Communication Module	BMENOR2200H V1.0
Schneider Electric	X80 advanced RTU Communication Module	1.0
Schneider Electric	OPC UA Modicon Communication Module	*

Timeline

Jul 12, 2022 CVE Published
Jul 15, 2022 EPSS Score (30 in total, the first dated here)
Sep 8, 2022 CVE Updated
Jun 2, 2026 Security Advisory
Jun 21, 2026 Coalition ESS Score

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2022-34760
vulnetix vdb fixes CVE-2022-34760

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2022-34760/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

x_refsource_MISC

Look up in the Resolve Platform →