CVE-2022-37301

🗓️ 22 Nov 2022 00:00:00Reported by schneiderType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 71 Views

CVE-2022-37301: Integer Underflow vulnerability in Modbus TC

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	The vulnerability of the Modbus TCP protocol implementation in microprogrammed software for programmable logic controllers from Schneider Electric, such as Modicon M340, M580, MC80, Modicon Momentum MDI, Legacy Modicon Quantum/Premium, allows a intruder to trigger a service failure.	15 Aug 202200:00	–	bdu_fstec
Circl	CVE-2022-37301	28 Apr 202515:10	–	circl
CNNVD	Schneider Electric Modicon M340 数字错误漏洞	22 Nov 202200:00	–	cnnvd
CNVD	Schneider Electric Product Numerical Error Vulnerability	24 Nov 202200:00	–	cnvd
Cvelist	CVE-2022-37301	22 Nov 202200:00	–	cvelist
EUVD	EUVD-2022-39937	3 Oct 202520:07	–	euvd
NVD	CVE-2022-37301	22 Nov 202212:15	–	nvd
OSV	CVE-2022-37301	22 Nov 202212:15	–	osv
Prion	Integer overflow	22 Nov 202212:15	–	prion
Positive Technologies	PT-2022-4155 · Schneider Electric · Modicon Quantum/Premium +4	9 Aug 202200:00	–	ptsecurity

NVD

Node

schneider-electric modicon_m340_bmx_p34-2010_firmwareRange<3.50

AND

schneider-electric modicon_m340_bmx_p34-2010Match-

Node

schneider-electric modicon_m340_bmx_p34-2030_firmwareRange<3.50

AND

schneider-electric modicon_m340_bmx_p34-2030Match-

Node

schneider-electric modicon_m580_bmeh582040_firmwareRange<4.01

AND

schneider-electric modicon_m580_bmeh582040Match-

Node

schneider-electric modicon_m580_bmeh582040c_firmwareRange<4.01

AND

schneider-electric modicon_m580_bmeh582040cMatch-

Node

schneider-electric modicon_m580_bmeh582040s_firmwareRange<4.01

AND

schneider-electric modicon_m580_bmeh582040sMatch-

Node

schneider-electric modicon_m580_bmeh584040_firmwareRange<4.01

AND

schneider-electric modicon_m580_bmeh584040Match-

Node

schneider-electric modicon_m580_bmeh584040c_firmwareRange<4.01

AND

schneider-electric modicon_m580_bmeh584040cMatch-

Node

schneider-electric modicon_m580_bmeh584040s_firmwareRange<4.01

AND

schneider-electric modicon_m580_bmeh584040sMatch-

Node

schneider-electric modicon_m580_bmeh586040_firmwareRange<4.01

AND

schneider-electric modicon_m580_bmeh586040Match-

Node

schneider-electric modicon_m580_bmeh586040c_firmwareRange<4.01

AND

schneider-electric modicon_m580_bmeh586040cMatch-

Node

schneider-electric modicon_m580_bmeh586040s_firmwareRange<4.01

AND

schneider-electric modicon_m580_bmeh586040sMatch-

Node

schneider-electric modicon_m580_bmep581020_firmwareRange<4.01

AND

schneider-electric modicon_m580_bmep581020Match-

Node

schneider-electric modicon_m580_bmep581020h_firmwareRange<4.01

AND

schneider-electric modicon_m580_bmep581020hMatch-

Node

schneider-electric modicon_m580_bmep582020_firmwareRange<4.01

AND

schneider-electric modicon_m580_bmep582020Match-

Node

schneider-electric modicon_m580_bmep582020h_firmwareRange<4.01

AND

schneider-electric modicon_m580_bmep582020hMatch-

Node

schneider-electric modicon_m580_bmep582040_firmwareRange<4.01

AND

schneider-electric modicon_m580_bmep582040Match-

Node

schneider-electric modicon_m580_bmep582040h_firmwareRange<4.01

AND

schneider-electric modicon_m580_bmep582040hMatch-

Node

schneider-electric modicon_m580_bmep582040s_firmwareRange<4.01

AND

schneider-electric modicon_m580_bmep582040sMatch-

Node

schneider-electric modicon_m580_bmep583020_firmwareRange<4.01

AND

schneider-electric modicon_m580_bmep583020Match-

Node

schneider-electric modicon_m580_bmep583040_firmwareRange<4.01

AND

schneider-electric modicon_m580_bmep583040Match-

Node

schneider-electric modicon_m580_bmep584020_firmwareRange<4.01

AND

schneider-electric modicon_m580_bmep584020Match-

Node

schneider-electric modicon_m580_bmep584040_firmwareRange<4.01

AND

schneider-electric modicon_m580_bmep584040Match-

Node

schneider-electric modicon_m580_bmep584040s_firmwareRange<4.01

AND

schneider-electric modicon_m580_bmep584040sMatch-

Node

schneider-electric modicon_m580_bmep585040_firmwareRange<4.01

AND

schneider-electric modicon_m580_bmep585040Match-

Node

schneider-electric modicon_m580_bmep585040c_firmwareRange<4.01

AND

schneider-electric modicon_m580_bmep585040cMatch-

Node

schneider-electric modicon_m580_bmep586040_firmwareRange<4.01

AND

schneider-electric modicon_m580_bmep586040Match-

Node

schneider-electric modicon_m580_bmep586040c_firmwareRange<4.01

AND

schneider-electric modicon_m580_bmep586040cMatch-

Node

schneider-electric modicon_mc80_bmkc8020301_firmwareRange<1.8

AND

schneider-electric modicon_mc80_bmkc8020301Match-

Node

schneider-electric modicon_mc80_bmkc8020310_firmwareRange<1.8

AND

schneider-electric modicon_mc80_bmkc8020310Match-

Node

schneider-electric modicon_mc80_bmkc8030311_firmwareRange<1.8

AND

schneider-electric modicon_mc80_bmkc8030311Match-

Node

schneider-electric modicon_momentum_171cbu78090_firmwareMatch-

AND

schneider-electric modicon_momentum_171cbu78090Match-

Node

schneider-electric modicon_momentum_171cbu98090_firmwareMatch-

AND

schneider-electric modicon_momentum_171cbu98090Match-

Node

schneider-electric modicon_momentum_171cbu98091_firmwareMatch-

AND

schneider-electric modicon_momentum_171cbu98091Match-

Node

schneider-electric modicon_premium_tsxp57_1634m_firmwareMatch-

AND

schneider-electric modicon_premium_tsxp57_1634mMatch-

Node

schneider-electric modicon_premium_tsxp57_2634m_firmwareMatch-

AND

schneider-electric modicon_premium_tsxp57_2634mMatch-

Node

schneider-electric modicon_premium_tsxp57_2834m_firmwareMatch-

AND

schneider-electric modicon_premium_tsxp57_2834mMatch-

Node

schneider-electric modicon_premium_tsxp57_454m_firmwareMatch-

AND

schneider-electric modicon_premium_tsxp57_454mMatch-

Node

schneider-electric modicon_premium_tsxp57_4634m_firmwareMatch-

AND

schneider-electric modicon_premium_tsxp57_4634mMatch-

Node

schneider-electric modicon_premium_tsxp57_554m_firmwareMatch-

AND

schneider-electric modicon_premium_tsxp57_554mMatch-

Node

schneider-electric modicon_premium_tsxp57_5634m_firmwareMatch-

AND

schneider-electric modicon_premium_tsxp57_5634mMatch-

Node

schneider-electric modicon_premium_tsxp57_6634m_firmwareMatch-

AND

schneider-electric modicon_premium_tsxp57_6634mMatch-

Node

schneider-electric modicon_quantum_140cpu65150_firmwareMatch-

AND

schneider-electric modicon_quantum_140cpu65150Match-

Node

schneider-electric modicon_quantum_140cpu65150c_firmwareMatch-

AND

schneider-electric modicon_quantum_140cpu65150cMatch-

Node

schneider-electric modicon_quantum_140cpu65160_firmwareMatch-

AND

schneider-electric modicon_quantum_140cpu65160Match-

Node

schneider-electric modicon_quantum_140cpu65160c_firmwareMatch-

AND

schneider-electric modicon_quantum_140cpu65160cMatch-

Node

schneider-electric modicon_quantum_140noc78100_firmwareMatch-

AND

schneider-electric modicon_quantum_140noc78100Match-

Node

schneider-electric modicon_quantum_140noe77101_firmwareMatch-

AND

schneider-electric modicon_quantum_140noe77101Match-

Node

schneider-electric modicon_quantum_140noe77111_firmwareMatch-

AND

schneider-electric modicon_quantum_140noe77111Match-

[
  {
    "vendor": "Schneider Electric",
    "product": "Modicon M340 CPU (part numbers BMXP34*)",
    "versions": [
      {
        "version": "V",
        "status": "affected",
        "lessThanOrEqual": "3.40",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Schneider Electric",
    "product": "Modicon M580 CPU (part numbers BMEP* and BMEH*) ",
    "versions": [
      {
        "version": "V",
        "status": "affected",
        "lessThanOrEqual": "3.22",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Schneider Electric",
    "product": "Legacy Modicon Quantum/Premium",
    "versions": [
      {
        "version": "All  Versions",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Schneider Electric",
    "product": "Modicon Momentum MDI (171CBU*)",
    "versions": [
      {
        "version": "All  Versions",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Schneider Electric",
    "product": "Modicon MC80 (BMKC80)",
    "versions": [
      {
        "version": "V",
        "status": "affected",
        "lessThanOrEqual": "1.7",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
se	www.se.com/us/en/download/document/SEVD-2022-221-02/

17 Jun 2026 04:54Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.5

EPSS0.00702

SSVC

CWE-191