CVE-2022-45788

🗓️ 30 Jan 2023 00:00:00Reported by schneiderType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 74 Views

CVE-2022-45788: CWE-754 vulnerability in EcoStruxure Control Expert, EcoStruxure Process Expert, and Modicon CPU

Reporter	Title	Published	Views	Family All 16
ATTACKERKB	CVE-2022-45788	30 Jan 202313:15	–	attackerkb
BDU FSTEC	The vulnerability of Schneider Electric’s programmable logic controllers’ microprogramming software lies in the insufficient testing of unusual or exceptional states. This allows a intruder to execute arbitrary code or cause malfunctions during maintenance.	20 Jan 202300:00	–	bdu_fstec
Circl	CVE-2022-45788	30 Jan 202316:37	–	circl
CNNVD	Schneider Electric EcoStruxure Control Expert 代码问题漏洞	30 Jan 202300:00	–	cnnvd
Cvelist	CVE-2022-45788	30 Jan 202300:00	–	cvelist
EUVD	EUVD-2022-48644	3 Oct 202520:07	–	euvd
ICS	Schneider Electric EcoStruxure Products, Modicon PLCs, and Programmable Automation Controllers	20 Jul 202306:00	–	ics
NCSC	Vulnerabilities fixed in Schneider Electric EcoStruxure and Modicon products	31 Jan 202300:00	–	ncsc
NVD	CVE-2022-45788	30 Jan 202313:15	–	nvd
Prion	Design/Logic Flaw	30 Jan 202313:15	–	prion

NVD

Node

schneider-electric ecostruxure_control_expert

schneider-electric ecostruxure_process_expertRange<2021

Node

schneider-electric modicon_m340_bmxp341000_firmwareMatch-

AND

schneider-electric modicon_m340_bmxp341000Match-

Node

schneider-electric modicon_m340_bmxp342000_firmwareMatch-

AND

schneider-electric modicon_m340_bmxp342000Match-

Node

schneider-electric modicon_m340_bmxp342010_firmwareMatch-

AND

schneider-electric modicon_m340_bmxp342010Match-

Node

schneider-electric modicon_m340_bmxp3420102_firmwareMatch-

AND

schneider-electric modicon_m340_bmxp3420102Match-

Node

schneider-electric modicon_m340_bmxp342020_firmwareMatch-

AND

schneider-electric modicon_m340_bmxp342020Match-

Node

schneider-electric modicon_m340_bmxp342020h_firmwareMatch-

AND

schneider-electric modicon_m340_bmxp342020hMatch-

Node

schneider-electric modicon_m340_bmxp342030_firmwareMatch-

AND

schneider-electric modicon_m340_bmxp342030Match-

Node

schneider-electric modicon_m340_bmxp3420302_firmwareMatch-

AND

schneider-electric modicon_m340_bmxp3420302Match-

Node

schneider-electric modicon_m340_bmxp3420302h_firmwareMatch-

AND

schneider-electric modicon_m340_bmxp3420302hMatch-

Node

schneider-electric modicon_m340_bmxp342030h_firmwareMatch-

AND

schneider-electric modicon_m340_bmxp342030hMatch-

Node

schneider-electric modicon_m580_bmeh582040_firmwareMatch-

AND

schneider-electric modicon_m580_bmeh582040Match-

Node

schneider-electric modicon_m580_bmeh582040c_firmwareMatch-

AND

schneider-electric modicon_m580_bmeh582040cMatch-

Node

schneider-electric modicon_m580_bmeh582040s_firmwareMatch-

AND

schneider-electric modicon_m580_bmeh582040sMatch-

Node

schneider-electric modicon_m580_bmeh584040_firmwareMatch-

AND

schneider-electric modicon_m580_bmeh584040Match-

Node

schneider-electric modicon_m580_bmeh584040c_firmwareMatch-

AND

schneider-electric modicon_m580_bmeh584040cMatch-

Node

schneider-electric modicon_m580_bmeh584040s_firmwareMatch-

AND

schneider-electric modicon_m580_bmeh584040sMatch-

Node

schneider-electric modicon_m580_bmeh586040_firmwareMatch-

AND

schneider-electric modicon_m580_bmeh586040Match-

Node

schneider-electric modicon_m580_bmeh586040c_firmwareMatch-

AND

schneider-electric modicon_m580_bmeh586040cMatch-

Node

schneider-electric modicon_m580_bmeh586040s_firmwareMatch-

AND

schneider-electric modicon_m580_bmeh586040sMatch-

Node

schneider-electric modicon_m580_bmep581020_firmwareMatch-

AND

schneider-electric modicon_m580_bmep581020Match-

Node

schneider-electric modicon_m580_bmep581020h_firmwareMatch-

AND

schneider-electric modicon_m580_bmep581020hMatch-

Node

schneider-electric modicon_m580_bmep582020_firmwareMatch-

AND

schneider-electric modicon_m580_bmep582020Match-

Node

schneider-electric modicon_m580_bmep582020h_firmwareMatch-

AND

schneider-electric modicon_m580_bmep582020hMatch-

Node

schneider-electric modicon_m580_bmep582040_firmwareMatch-

AND

schneider-electric modicon_m580_bmep582040Match-

Node

schneider-electric modicon_m580_bmep582040h_firmwareMatch-

AND

schneider-electric modicon_m580_bmep582040hMatch-

Node

schneider-electric modicon_m580_bmep582040s_firmwareMatch-

AND

schneider-electric modicon_m580_bmep582040sMatch-

Node

schneider-electric modicon_m580_bmep583020_firmwareMatch-

AND

schneider-electric modicon_m580_bmep583020Match-

Node

schneider-electric modicon_m580_bmep583040_firmwareMatch-

AND

schneider-electric modicon_m580_bmep583040Match-

Node

schneider-electric modicon_m580_bmep584020_firmwareMatch-

AND

schneider-electric modicon_m580_bmep584020Match-

Node

schneider-electric modicon_m580_bmep584040_firmwareMatch-

AND

schneider-electric modicon_m580_bmep584040Match-

Node

schneider-electric modicon_m580_bmep584040s_firmwareMatch-

AND

schneider-electric modicon_m580_bmep584040sMatch-

Node

schneider-electric modicon_m580_bmep585040_firmwareMatch-

AND

schneider-electric modicon_m580_bmep585040Match-

Node

schneider-electric modicon_m580_bmep585040c_firmwareMatch-

AND

schneider-electric modicon_m580_bmep585040cMatch-

Node

schneider-electric modicon_m580_bmep586040_firmwareMatch-

AND

schneider-electric modicon_m580_bmep586040Match-

Node

schneider-electric modicon_m580_bmep586040c_firmwareMatch-

AND

schneider-electric modicon_m580_bmep586040cMatch-

Node

schneider-electric modicon_momentum_171cbu78090_firmwareMatch-

AND

schneider-electric modicon_momentum_171cbu78090Match-

Node

schneider-electric modicon_momentum_171cbu98090_firmwareMatch-

AND

schneider-electric modicon_momentum_171cbu98090Match-

Node

schneider-electric modicon_momentum_171cbu98091_firmwareMatch-

AND

schneider-electric modicon_momentum_171cbu98091Match-

Node

schneider-electric modicon_mc80_bmkc8020301_firmwareMatch-

AND

schneider-electric modicon_mc80_bmkc8020301Match-

Node

schneider-electric modicon_mc80_bmkc8020310_firmwareMatch-

AND

schneider-electric modicon_mc80_bmkc8020310Match-

Node

schneider-electric modicon_mc80_bmkc8030311_firmwareMatch-

AND

schneider-electric modicon_mc80_bmkc8030311Match-

Node

schneider-electric modicon_quantum_140cpu65150_firmwareMatch-

AND

schneider-electric modicon_quantum_140cpu65150Match-

Node

schneider-electric modicon_quantum_140cpu65150c_firmwareMatch-

AND

schneider-electric modicon_quantum_140cpu65150cMatch-

Node

schneider-electric modicon_quantum_140cpu65160_firmwareMatch-

AND

schneider-electric modicon_quantum_140cpu65160Match-

Node

schneider-electric modicon_quantum_140cpu65160c_firmwareMatch-

AND

schneider-electric modicon_quantum_140cpu65160cMatch-

Node

schneider-electric modicon_premium_tsxp57_1634m_firmwareMatch-

AND

schneider-electric modicon_premium_tsxp57_1634mMatch-

Node

schneider-electric modicon_premium_tsxp57_2634m_firmwareMatch-

AND

schneider-electric modicon_premium_tsxp57_2634mMatch-

Node

schneider-electric modicon_premium_tsxp57_2834m_firmwareMatch-

AND

schneider-electric modicon_premium_tsxp57_2834mMatch-

Node

schneider-electric modicon_premium_tsxp57_454m_firmwareMatch-

AND

schneider-electric modicon_premium_tsxp57_454mMatch-

Node

schneider-electric modicon_premium_tsxp57_4634m_firmwareMatch-

AND

schneider-electric modicon_premium_tsxp57_4634mMatch-

Node

schneider-electric modicon_premium_tsxp57_554m_firmwareMatch-

AND

schneider-electric modicon_premium_tsxp57_554mMatch-

Node

schneider-electric modicon_premium_tsxp57_5634m_firmwareMatch-

AND

schneider-electric modicon_premium_tsxp57_5634mMatch-

Node

schneider-electric modicon_premium_tsxp57_6634m_firmwareMatch-

AND

schneider-electric modicon_premium_tsxp57_6634mMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "EcoStruxure Control Expert ",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "All Versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "EcoStruxure Process Expert",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "All Versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Modicon M340 CPU (part numbers BMXP34*)",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "All Versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Modicon M580 CPU (part numbers BMEP* and BMEH*) ",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "All Versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S)",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "All Versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Modicon Momentum Unity M1E Processor (171CBU*)",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "All Versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Modicon MC80 (BMKC80)",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "All Versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Legacy Modicon Quantum (140CPU65*) and Premium CPUs (TSXP57*)",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "All Versions"
      }
    ]
  }
]

Source	Link
download	www.download.schneider-electric.com/files

21 Nov 2024 07:29Current

9.5High risk

Vulners AI Score9.5

CVSS 3.17.5 - 9.8

EPSS0.00395

SSVC

CWE-754