ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2022-0222

—
CVSS 3.1
7.5 high
EPSS
<1%p46
Published
()
Modified
Description

A CWE-269: Improper Privilege Management vulnerability exists that could cause a denial of service of the Ethernet communication of the controller when sending a specific request over SNMP. Affected products: Modicon M340 CPUs(BMXP34* versions prior to V3.40), Modicon M340 X80 Ethernet Communication modules:BMXNOE0100 (H), BMXNOE0110 (H), BMXNOR0200H RTU(BMXNOE* all versions)(BMXNOR* versions prior to v1.7 IR24)

Vendors
schneider-electric
Products
modicon m340 bmxp341000 firmware, modicon m340 bmxp342000 firmware, modicon m340 bmxp342010 firmware, modicon m340 bmxp3420102 firmware, modicon m340 bmxp342020 firmware, modicon m340 bmxp342020h firmware, modicon m340 bmxp342030 firmware, modicon m340 bmxp3420302 firmware, modicon m340 bmxp3420302h firmware, modicon m340 bmxp342030h firmware, modicon m340 bmxnoe0100 firmware, modicon m340 bmxnoe0110 firmware
Weakness
CWE-269
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news

No ingested article mentions this CVE yet.