Vulnerabilities fixed in Schneider Electric Modicon components

🗓️ 12 Apr 2023 00:00:00Reported by NCSCType

Schneider Electric fixed Modicon vulnerabilities; production access could enable denial of service or manipulation; updates released.

Reporter	Title	Published	Views	Family All 48
ATTACKERKB	CVE-2022-4046	3 Aug 202313:15	–	attackerkb
ATTACKERKB	CVE-2022-4224	23 Mar 202312:15	–	attackerkb
BDU FSTEC	The vulnerability of the Codesys industrial automation software suite, related to the disclosure of information in the erroneous data area, allows a intruder to gain unauthorized access or cause service failures.	24 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Codesys software suite for industrial automation integrated into Schneider Electric’s programmable logic controllers allows a perpetrator to compromise data integrity.	24 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogramming software used in Schneider Electric Modicon programmable logic controllers lies in the insufficient checking of unusual or exceptional states. This allows a intruder to trigger a service failure.	31 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Modbus TCP protocol implementation in Schneider Electric Modicon programmable logic controllers allows a intruder to trigger a service failure.	31 May 202300:00	–	bdu_fstec
BDU FSTEC	The software system of Schneider Electric’s industrial automation solutions, Codesys, has vulnerabilities. These vulnerabilities allow attackers to cause a loss of control and trigger malfunctions during maintenance operations.	13 Jun 202300:00	–	bdu_fstec
Circl	CVE-2022-4046	3 Aug 202316:40	–	circl
Circl	CVE-2022-4224	23 Mar 202315:51	–	circl
CNNVD	3s-smart Software Solutions CODESYS 安全漏洞	23 Mar 202300:00	–	cnnvd

12 Apr 2023 00:00Current

7High risk

Vulners AI Score7

CVSS 3.18.8

EPSS0.00883

SSVC