CVE-2022-45789

🗓️ 31 Jan 2023 00:00:00Reported by schneiderType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 82 Views

CVE-2022-45789 CWE-294: Authentication Bypass by Capture-replay vulnerability in EcoStruxure Control Expert, EcoStruxure Process Expert, Modicon M340 CPU, Modicon M580 CPU, Modicon M580 CPU Safet

Reporter	Title	Published	Views	Family All 16
ATTACKERKB	CVE-2022-45789	31 Jan 202306:15	–	attackerkb
Circl	CVE-2022-45789	31 Jan 202312:38	–	circl
CNNVD	Schneider Electric EcoStruxure Control Expert 安全漏洞	31 Jan 202300:00	–	cnnvd
Cvelist	CVE-2022-45789	31 Jan 202300:00	–	cvelist
EUVD	EUVD-2022-48645	3 Oct 202520:07	–	euvd
ICS	Schneider Electric EcoStruxure Control Expert, Process Expert, Modicon M340, M580 and M580 CPU (Update A)	10 Jan 202300:00	–	ics
NCSC	Vulnerabilities fixed in Schneider Electric EcoStruxure and Modicon products	31 Jan 202300:00	–	ncsc
NVD	CVE-2022-45789	31 Jan 202306:15	–	nvd
OSV	CVE-2022-45789	31 Jan 202306:15	–	osv
Prion	Authentication flaw	31 Jan 202306:15	–	prion

NVD

Node

schneider-electric ecostruxure_control_expert

schneider-electric ecostruxure_process_expertRange≤2020

Node

schneider-electric modicon_m340_bmxp341000_firmware

AND

schneider-electric modicon_m340_bmxp341000Match-

Node

schneider-electric modicon_m340_bmxp342000_firmware

AND

schneider-electric modicon_m340_bmxp342000Match-

Node

schneider-electric modicon_m340_bmxp342010_firmwareMatch-

AND

schneider-electric modicon_m340_bmxp342010

Node

schneider-electric modicon_m340_bmxp3420102_firmware

AND

schneider-electric modicon_m340_bmxp3420102Match-

Node

schneider-electric modicon_m340_bmxp342020_firmware

AND

schneider-electric modicon_m340_bmxp342020Match-

Node

schneider-electric modicon_m340_bmxp342020h_firmware

AND

schneider-electric modicon_m340_bmxp342020hMatch-

Node

schneider-electric modicon_m340_bmxp342030_firmware

AND

schneider-electric modicon_m340_bmxp342030Match-

Node

schneider-electric modicon_m340_bmxp3420302_firmware

AND

schneider-electric modicon_m340_bmxp3420302Match-

Node

schneider-electric modicon_m340_bmxp3420302h_firmware

AND

schneider-electric modicon_m340_bmxp3420302hMatch-

Node

schneider-electric modicon_m340_bmxp342030h_firmware

AND

schneider-electric modicon_m340_bmxp342030hMatch-

Node

schneider-electric modicon_m580_bmep581020_firmware

AND

schneider-electric modicon_m580_bmep581020Match-

Node

schneider-electric modicon_m580_bmep581020h_firmware

AND

schneider-electric modicon_m580_bmep581020hMatch-

Node

schneider-electric modicon_m580_bmep582020_firmware

AND

schneider-electric modicon_m580_bmep582020Match-

Node

schneider-electric modicon_m580_bmep582020h_firmware

AND

schneider-electric modicon_m580_bmep582020hMatch-

Node

schneider-electric modicon_m580_bmep582040_firmware

AND

schneider-electric modicon_m580_bmep582040Match-

Node

schneider-electric modicon_m580_bmep582040h_firmware

AND

schneider-electric modicon_m580_bmep582040hMatch-

Node

schneider-electric modicon_m580_bmep582040s_firmware

AND

schneider-electric modicon_m580_bmep582040sMatch-

Node

schneider-electric modicon_m580_bmep583020_firmware

AND

schneider-electric modicon_m580_bmep583020Match-

Node

schneider-electric modicon_m580_bmep583040_firmware

AND

schneider-electric modicon_m580_bmep583040Match-

Node

schneider-electric modicon_m580_bmep584020_firmware

AND

schneider-electric modicon_m580_bmep584020Match-

Node

schneider-electric modicon_m580_bmep584040_firmware

AND

schneider-electric modicon_m580_bmep584040Match-

Node

schneider-electric modicon_m580_bmep584040s_firmware

AND

schneider-electric modicon_m580_bmep584040sMatch-

Node

schneider-electric modicon_m580_bmep585040_firmware

AND

schneider-electric modicon_m580_bmep585040Match-

Node

schneider-electric modicon_m580_bmep585040c_firmware

AND

schneider-electric modicon_m580_bmep585040cMatch-

Node

schneider-electric modicon_m580_bmep586040_firmware

AND

schneider-electric modicon_m580_bmep586040Match-

Node

schneider-electric modicon_m580_bmep586040c_firmware

AND

schneider-electric modicon_m580_bmep586040cMatch-

Node

schneider-electric modicon_m580_bmeh582040_firmware

AND

schneider-electric modicon_m580_bmeh582040Match-

Node

schneider-electric modicon_m580_bmeh582040c_firmware

AND

schneider-electric modicon_m580_bmeh582040cMatch-

Node

schneider-electric modicon_m580_bmeh582040s_firmware

AND

schneider-electric modicon_m580_bmeh582040sMatch-

Node

schneider-electric modicon_m580_bmeh584040_firmware

AND

schneider-electric modicon_m580_bmeh584040Match-

Node

schneider-electric modicon_m580_bmeh584040c_firmware

AND

schneider-electric modicon_m580_bmeh584040cMatch-

Node

schneider-electric modicon_m580_bmeh584040s_firmware

AND

schneider-electric modicon_m580_bmeh584040sMatch-

Node

schneider-electric modicon_m580_bmeh586040_firmware

AND

schneider-electric modicon_m580_bmeh586040Match-

Node

schneider-electric modicon_m580_bmeh586040c_firmware

AND

schneider-electric modicon_m580_bmeh586040cMatch-

Node

schneider-electric modicon_m580_bmeh586040s_firmware

AND

schneider-electric modicon_m580_bmeh586040sMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "EcoStruxure Control Expert ",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "All Versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "EcoStruxure Process Expert",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "All Versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Modicon M340 CPU (part numbers BMXP34*)",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "All Versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Modicon M580 CPU (part numbers BMEP* and BMEH*) ",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "All Versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S)",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "All Versions"
      }
    ]
  }
]

Source	Link
download	www.download.schneider-electric.com/files

21 Nov 2024 07:29Current

9.3High risk

Vulners AI Score9.3

CVSS 3.18.1 - 9.8

EPSS0.00116

SSVC

CWE-294