CVE-2022-22724
CVE-2022-22724
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
04 Feb 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of service on ports 80 (HTTP) and 502 (Modbus), when sending a large number of TCP RST or FIN packets to any open TCP port of the PLC. Affected Product: Modicon M340 CPUs: BMXP34 (All Versions)
Affected products
n/a · Modicon M340 CPUs: BMXP34 (All Versions)Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →