CVE-2022-45789
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.1epss 1.4%
probabilidade de exploração
1.4%top 29% das CVEs
exploração observada
nãonenhuma fonte reporta
A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbus functions on the controller when hijacking an authenticated Modbus session. Affected Products: EcoStruxure Control Expert (All Versions), EcoStruxure Process Expert (All Versions), Modicon M340 CPU - part numbers BMXP34* (All Versions), Modicon M580 CPU - part numbers BMEP* and BMEH* (All Versions), Modicon M580 CPU Safety - part numbers BMEP58*S and BMEH58*S (All Versions)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Schneider Electric · EcoStruxure Control ExpertSchneider Electric · EcoStruxure Process ExpertSchneider Electric · Modicon M340 CPU (part numbers BMXP34*)Schneider Electric · Modicon M580 CPU (part numbers BMEP* and BMEH*)Schneider Electric · Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S)