Schneider Electric Modicon NULL Pointer Dereference (CVE-2022-34761)

A CWE-476: NULL Pointer Dereference vulnerability exists that could cause a denial of service of the webserver when parsing JSON content type. Affected Products: X80 advanced RTU Communication Module BMENOR2200H V2.01 and later, OPC UA Modicon Communication Module BMENUA0100 V1.10 and prior - A...

CVE-2022-34761

creationtimestamp| type| source ---|---|--- 2022-07-14 00:40:08+00:00| seen| https://t.me/cibsecurity/46210...

CVE-2022-34761

CVE-2022-34761 is a NULL pointer dereference in Schneider Electric’s X80 advanced RTU Module (BMENOR2200H, V2.01+) and OPC UA Modicon Module (BMENUA0100, V1.10 and older) that can cause a denial of service in the webserver when parsing JSON content. The root cause is a NULL pointer dereference re...