Integer overflow

2022-11-2212:15:00

PRIOn knowledge base

www.prio-n.com

cwe-191

memory access violations

modbus tcp

modicon m340

modicon m580

modicon quantum/premium

modicon momentum mdi

modicon mc80

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.4%

JSON

A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus TCP protocol. Affected products: Modicon M340 CPU (part numbers BMXP34*)(V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*)(V3.22 and prior), Legacy Modicon Quantum/Premium(All Versions), Modicon Momentum MDI (171CBU*)(All Versions), Modicon MC80 (BMKC80)(V1.7 and prior)

CPENameOperatorVersion
modicon_m340_bmx_p34-2010_firmwarelt3.50
modicon_m340_bmx_p34-2030_firmwarelt3.50
modicon_m580_bmeh582040_firmwarelt4.01
modicon_m580_bmeh582040c_firmwarelt4.01
modicon_m580_bmeh582040s_firmwarelt4.01
modicon_m580_bmeh584040_firmwarelt4.01
modicon_m580_bmeh584040c_firmwarelt4.01
modicon_m580_bmeh584040s_firmwarelt4.01
modicon_m580_bmeh586040_firmwarelt4.01
modicon_m580_bmeh586040c_firmwarelt4.01

Name	Operator	Version
modicon_m340_bmx_p34-2010_firmware	lt	3.50
modicon_m340_bmx_p34-2030_firmware	lt	3.50
modicon_m580_bmeh582040_firmware	lt	4.01
modicon_m580_bmeh582040c_firmware	lt	4.01
modicon_m580_bmeh582040s_firmware	lt	4.01
modicon_m580_bmeh584040_firmware	lt	4.01
modicon_m580_bmeh584040c_firmware	lt	4.01
modicon_m580_bmeh584040s_firmware	lt	4.01
modicon_m580_bmeh586040_firmware	lt	4.01
modicon_m580_bmeh586040c_firmware	lt	4.01