CVE-2022-37300

🗓️ 12 Sep 2022 17:40:10Reported by schneiderType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 124 Views

CWE-640: Weak Password Recovery Mechanism vulnerability in Modbus communication for EcoStruxure Control Expert, EcoStruxure Process Expert, Modicon M340 and M580 CPUs

Reporter	Title	Published	Views	Family All 13
attackerkb	CVE-2022-37300	12 Sep 202218:15	–	attackerkb
BDU FSTEC	EcoStruxure Control Expert Process Expert Modbus Password Bypass	12 Aug 202200:00	–	bdu_fstec
Circl	CVE-2022-37300	12 Sep 202222:24	–	circl
CNNVD	Issues and vulnerabilities related to licensing of multiple Schneider Electric products	12 Sep 202200:00	–	cnnvd
Cvelist	CVE-2022-37300	12 Sep 202217:40	–	cvelist
EUVD	EUVD-2022-39936	3 Oct 202520:07	–	euvd
NVD	CVE-2022-37300	12 Sep 202218:15	–	nvd
osv_cve	CVE-2022-37300	12 Sep 202218:15	–	osv_cve
Prion	Design/Logic Flaw	12 Sep 202218:15	–	prion
Positive Technologies	PT-2022-4129 · Schneider Electric · Modicon M340 Cpu +3	9 Aug 202200:00	–	ptsecurity

NVD

Vulners

Node

schneider-electric ecostruxure_control_expertRange<15.1

schneider-electric ecostruxure_process_expertRange≤2021

Node

AND

schneider-electric modicon_m340_bmxp341000_firmwareRange<3.50

schneider-electric modicon_m340_bmxp341000Match-

Node

AND

schneider-electric modicon_m340_bmxp342000_firmwareRange<3.50

schneider-electric modicon_m340_bmxp342000Match-

Node

AND

schneider-electric modicon_m340_bmxp342010_firmwareRange<3.50

schneider-electric modicon_m340_bmxp342010Match-

Node

AND

schneider-electric modicon_m340_bmxp3420102_firmwareRange<3.50

schneider-electric modicon_m340_bmxp3420102Match-

Node

AND

schneider-electric modicon_m340_bmxp342020_firmwareRange<3.50

schneider-electric modicon_m340_bmxp342020Match-

Node

AND

schneider-electric modicon_m340_bmxp342020h_firmwareRange<3.50

schneider-electric modicon_m340_bmxp342020hMatch-

Node

AND

schneider-electric modicon_m340_bmxp342030_firmwareRange<3.50

schneider-electric modicon_m340_bmxp342030Match-

Node

AND

schneider-electric modicon_m340_bmxp3420302_firmwareRange<3.50

schneider-electric modicon_m340_bmxp3420302Match-

Node

AND

schneider-electric modicon_m340_bmxp3420302h_firmwareRange<3.50

schneider-electric modicon_m340_bmxp3420302hMatch-

Node

AND

schneider-electric modicon_m340_bmxp342030h_firmwareRange<3.50

schneider-electric modicon_m340_bmxp342030hMatch-

Node

AND

schneider-electric modicon_m580_bmeh582040_firmwareRange<4.02

schneider-electric modicon_m580_bmeh582040Match-

Node

AND

schneider-electric modicon_m580_bmeh582040c_firmwareRange<4.02

schneider-electric modicon_m580_bmeh582040cMatch-

Node

AND

schneider-electric modicon_m580_bmeh582040s_firmwareRange<4.02

schneider-electric modicon_m580_bmeh582040sMatch-

Node

AND

schneider-electric modicon_m580_bmeh584040_firmwareRange<4.02

schneider-electric modicon_m580_bmeh584040Match-

Node

AND

schneider-electric modicon_m580_bmeh584040c_firmwareRange<4.02

schneider-electric modicon_m580_bmeh584040cMatch-

Node

AND

schneider-electric modicon_m580_bmeh584040s_firmwareRange<4.02

schneider-electric modicon_m580_bmeh584040sMatch-

Node

AND

schneider-electric modicon_m580_bmeh586040_firmwareRange<4.02

schneider-electric modicon_m580_bmeh586040Match-

Node

AND

schneider-electric modicon_m580_bmeh586040c_firmwareRange<4.02

schneider-electric modicon_m580_bmeh586040cMatch-

Node

AND

schneider-electric modicon_m580_bmeh586040s_firmwareRange<4.02

schneider-electric modicon_m580_bmeh586040sMatch-

Node

AND

schneider-electric modicon_m580_bmep581020_firmwareRange<4.02

schneider-electric modicon_m580_bmep581020Match-

Node

AND

schneider-electric modicon_m580_bmep581020h_firmwareRange<4.02

schneider-electric modicon_m580_bmep581020hMatch-

Node

AND

schneider-electric modicon_m580_bmep582020_firmwareRange<4.02

schneider-electric modicon_m580_bmep582020Match-

Node

AND

schneider-electric modicon_m580_bmep582020h_firmwareRange<4.02

schneider-electric modicon_m580_bmep582020hMatch-

Node

AND

schneider-electric modicon_m580_bmep582040_firmwareRange<4.02

schneider-electric modicon_m580_bmep582040Match-

Node

AND

schneider-electric modicon_m580_bmep582040h_firmwareRange<4.02

schneider-electric modicon_m580_bmep582040hMatch-

Node

AND

schneider-electric modicon_m580_bmep583020_firmwareRange<4.02

schneider-electric modicon_m580_bmep583020Match-

Node

AND

schneider-electric modicon_m580_bmep583040_firmwareRange<4.02

schneider-electric modicon_m580_bmep583040Match-

Node

AND

schneider-electric modicon_m580_bmep584020_firmwareRange<4.02

schneider-electric modicon_m580_bmep584020Match-

Node

AND

schneider-electric modicon_m580_bmep584040_firmwareRange<4.02

schneider-electric modicon_m580_bmep584040Match-

Node

AND

schneider-electric modicon_m580_bmep584040s_firmwareRange<4.02

schneider-electric modicon_m580_bmep584040sMatch-

Node

AND

schneider-electric modicon_m580_bmep585040_firmwareRange<4.02

schneider-electric modicon_m580_bmep585040Match-

Node

AND

schneider-electric modicon_m580_bmep585040c_firmwareRange<4.02

schneider-electric modicon_m580_bmep585040cMatch-

Node

AND

schneider-electric modicon_m580_bmep586040_firmwareRange<4.02

schneider-electric modicon_m580_bmep586040Match-

Node

AND

schneider-electric modicon_m580_bmep586040c_firmwareRange<4.02

schneider-electric modicon_m580_bmep586040cMatch-

[
  {
    "product": "EcoStruxure Control Expert",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "lessThanOrEqual": "15.0",
        "status": "affected",
        "version": "SP1",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "EcoStruxure Process Expert",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "lessThanOrEqual": "2021",
        "status": "affected",
        "version": "V",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Modicon M340 CPU",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "lessThanOrEqual": "3.40",
        "status": "affected",
        "version": "BMXP34",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Modicon M580 CPU",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "lessThanOrEqual": "3.20",
        "status": "affected",
        "version": "BMEP",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "3.20",
        "status": "affected",
        "version": "BMEH",
        "versionType": "custom"
      }
    ]
  }
]