CVE-2022-45788

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when a malicious project file is loaded onto the controller. Affected Products: EcoStruxure Control Expert All...

Researchers Warn of Critical Security Bugs in Schneider Electric Modicon PLCs

Security researchers have disclosed two new vulnerabilities affecting Schneider Electric Modicon programmable logic controllers PLCs that could allow for authentication bypass and remote code execution. The flaws, tracked as CVE-2022-45788 CVSS score: 7.5 and CVE-2022-45789 CVSS score: 8.1, are...

CVE-2022-45788

Schneider Electric’s CVE-2022-45788 affects EcoStruxure Control Expert, EcoStruxure Process Expert, and multiple Modicon CPU families (M340 BMXP34*, M580 BMEP*/BMEH*, M580 Safety BMEP58*/BMEH58*, Momentum Unity 171CBU*, MC80 BMKC80, Legacy Quantum 140CPU65* and Premium TSXP57*; all versions prior...