CVE-2022-34760: Loop with Unreachable Exit Condition

A CWE-835: Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability exists that could cause a denial of service of the webserver due to improper handling of the cookies. Affected Products: X80 advanced RTU Communication Module BMENOR2200H V1.0, OPC UA Modicon Communication Module...

CVE-2022-34759: Out-of-bounds Write

A CWE-787: Out-of-bounds Write vulnerability exists that could cause a denial of service of the webserver due to improper parsing of the HTTP Headers. Affected Products: X80 advanced RTU Communication Module BMENOR2200H V1.0, OPC UA Modicon Communication Module BMENUA0100 V1.10 and prior...

Multiple Schneider Electric products have path traversal vulnerabilities

The Schneider Electric OPC UA Modicon Communication Module and the Schneider Electric X80 advanced RTU Communication Module are both products of the French company Schneider Electric. The Schneider Electric OPC UA Modicon Communication Module is an Ethernet communication module with an embedded O...

PT-2022-3627

Name of the Vulnerable Software and Affected Versions X80 advanced RTU Communication Module versions V1.0 OPC UA Modicon Communication Module versions V1.10 and prior Description A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer issue exists that could cause denia...

PT-2022-3628

Name of the Vulnerable Software and Affected Versions X80 advanced RTU Communication Module versions 2.01 and later OPC UA Modicon Communication Module versions 1.10 and prior Description A NULL Pointer Dereference vulnerability exists that could cause a denial of service of the webserver when...

PT-2022-3631

Name of the Vulnerable Software and Affected Versions X80 advanced RTU Communication Module versions V1.0 OPC UA Modicon Communication Module versions V1.10 and prior Description A Loop with Unreachable Exit Condition 'Infinite Loop' issue exists due to improper handling of cookies, which could...

PT-2022-3625

Name of the Vulnerable Software and Affected Versions X80 advanced RTU Communication Module versions 2.01 and later OPC UA Modicon Communication Module versions 1.10 and prior Description A vulnerability exists due to insufficient verification of data authenticity, which could cause the loading o...

PT-2022-3626

Name of the Vulnerable Software and Affected Versions X80 advanced RTU Communication Module versions 2.01 and later OPC UA Modicon Communication Module versions 1.10 and prior Description A vulnerability exists that could cause loading of unauthorized firmware images when user-controlled data is...

PT-2022-3630

Name of the Vulnerable Software and Affected Versions X80 advanced RTU Communication Module BMENOR2200H version V1.0 OPC UA Modicon Communication Module BMENUA0100 versions V1.10 and prior Description A vulnerability exists due to improper parsing of the HTTP Headers, which could cause a denial o...

PT-2022-3629

Name of the Vulnerable Software and Affected Versions X80 advanced RTU Communication Module BMENOR2200H versions V2.01 and later OPC UA Modicon Communication Module BMENUA0100 versions V1.10 and prior Description A path traversal vulnerability exists that could cause unauthorized firmware image...