Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2022-37301: A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus TCP protocol. Aff...

CVE-2022-37301 · published 3 years ago

Summary

What to do

Update schneider-electric modicon_m340_bmx_p34-2010_firmware to version 3.50 or later.
Update schneider-electric modicon_m340_bmx_p34-2030_firmware to version 3.50 or later.
Update schneider-electric modicon_m580_bmeh582040_firmware to version 4.01 or later.
Update schneider-electric modicon_m580_bmeh582040c_firmware to version 4.01 or later.
Update schneider-electric modicon_m580_bmeh582040s_firmware to version 4.01 or later.
Update schneider-electric modicon_m580_bmeh584040_firmware to version 4.01 or later.
Update schneider-electric modicon_m580_bmeh584040c_firmware to version 4.01 or later.
Update schneider-electric modicon_m580_bmeh584040s_firmware to version 4.01 or later.
Update schneider-electric modicon_m580_bmeh586040_firmware to version 4.01 or later.
Update schneider-electric modicon_m580_bmeh586040c_firmware to version 4.01 or later.
Update schneider-electric modicon_m580_bmeh586040s_firmware to version 4.01 or later.
Update schneider-electric modicon_m580_bmep581020_firmware to version 4.01 or later.
Update schneider-electric modicon_m580_bmep581020h_firmware to version 4.01 or later.
Update schneider-electric modicon_m580_bmep582020_firmware to version 4.01 or later.
Update schneider-electric modicon_m580_bmep582020h_firmware to version 4.01 or later.
Update schneider-electric modicon_m580_bmep582040_firmware to version 4.01 or later.
Update schneider-electric modicon_m580_bmep582040h_firmware to version 4.01 or later.
Update schneider-electric modicon_m580_bmep582040s_firmware to version 4.01 or later.
Update schneider-electric modicon_m580_bmep583020_firmware to version 4.01 or later.
Update schneider-electric modicon_m580_bmep583040_firmware to version 4.01 or later.
Update schneider-electric modicon_m580_bmep584020_firmware to version 4.01 or later.
Update schneider-electric modicon_m580_bmep584040_firmware to version 4.01 or later.
Update schneider-electric modicon_m580_bmep584040s_firmware to version 4.01 or later.
Update schneider-electric modicon_m580_bmep585040_firmware to version 4.01 or later.
Update schneider-electric modicon_m580_bmep585040c_firmware to version 4.01 or later.
Update schneider-electric modicon_m580_bmep586040_firmware to version 4.01 or later.
Update schneider-electric modicon_m580_bmep586040c_firmware to version 4.01 or later.
Update schneider-electric modicon_mc80_bmkc8020301_firmware to version 1.8 or later.
Update schneider-electric modicon_mc80_bmkc8020310_firmware to version 1.8 or later.
Update schneider-electric modicon_mc80_bmkc8030311_firmware to version 1.8 or later.

Affected software

Original advisory text

A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus TCP protocol. Affected products: Modicon M340 CPU (part numbers BMXP34*)(V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*)(V3.22 and prior), Legacy Modicon Quantum/Premium(All Versions), Modicon Momentum MDI (171CBU*)(All Versions), Modicon MC80 (BMKC80)(V1.7 and prior)

References

https://www.se.com/us/en/download/document/SEVD-2022-221-02/ Vendor Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically
Gives an attacker partial control

Severity

7.5 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-191Integer Underflow (Wrap or Wraparound)

Timeline

Published22 Nov 2022

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2022-37301 · NVD

Track software like this

Free during beta

Vendor	Product	Affected versions
schneider-electric	modicon_m340_bmx_p34-2010_firmware	< 3.50 `cpe:2.3:o:schneider-electric:modicon_m340_bmx_p34-2010_firmware::::::::`
schneider-electric	modicon_m340_bmx_p34-2030_firmware	< 3.50 `cpe:2.3:o:schneider-electric:modicon_m340_bmx_p34-2030_firmware::::::::`
schneider-electric	modicon_m580_bmeh582040_firmware	< 4.01 `cpe:2.3:o:schneider-electric:modicon_m580_bmeh582040_firmware::::::::`
schneider-electric	modicon_m580_bmeh582040c_firmware	< 4.01 `cpe:2.3:o:schneider-electric:modicon_m580_bmeh582040c_firmware::::::::`
schneider-electric	modicon_m580_bmeh582040s_firmware	< 4.01 `cpe:2.3:o:schneider-electric:modicon_m580_bmeh582040s_firmware::::::::`
schneider-electric	modicon_m580_bmeh584040_firmware	< 4.01 `cpe:2.3:o:schneider-electric:modicon_m580_bmeh584040_firmware::::::::`
schneider-electric	modicon_m580_bmeh584040c_firmware	< 4.01 `cpe:2.3:o:schneider-electric:modicon_m580_bmeh584040c_firmware::::::::`
schneider-electric	modicon_m580_bmeh584040s_firmware	< 4.01 `cpe:2.3:o:schneider-electric:modicon_m580_bmeh584040s_firmware::::::::`
schneider-electric	modicon_m580_bmeh586040_firmware	< 4.01 `cpe:2.3:o:schneider-electric:modicon_m580_bmeh586040_firmware::::::::`
schneider-electric	modicon_m580_bmeh586040c_firmware	< 4.01 `cpe:2.3:o:schneider-electric:modicon_m580_bmeh586040c_firmware::::::::`
schneider-electric	modicon_m580_bmeh586040s_firmware	< 4.01 `cpe:2.3:o:schneider-electric:modicon_m580_bmeh586040s_firmware::::::::`
schneider-electric	modicon_m580_bmep581020_firmware	< 4.01 `cpe:2.3:o:schneider-electric:modicon_m580_bmep581020_firmware::::::::`
schneider-electric	modicon_m580_bmep581020h_firmware	< 4.01 `cpe:2.3:o:schneider-electric:modicon_m580_bmep581020h_firmware::::::::`
schneider-electric	modicon_m580_bmep582020_firmware	< 4.01 `cpe:2.3:o:schneider-electric:modicon_m580_bmep582020_firmware::::::::`
schneider-electric	modicon_m580_bmep582020h_firmware	< 4.01 `cpe:2.3:o:schneider-electric:modicon_m580_bmep582020h_firmware::::::::`
schneider-electric	modicon_m580_bmep582040_firmware	< 4.01 `cpe:2.3:o:schneider-electric:modicon_m580_bmep582040_firmware::::::::`
schneider-electric	modicon_m580_bmep582040h_firmware	< 4.01 `cpe:2.3:o:schneider-electric:modicon_m580_bmep582040h_firmware::::::::`
schneider-electric	modicon_m580_bmep582040s_firmware	< 4.01 `cpe:2.3:o:schneider-electric:modicon_m580_bmep582040s_firmware::::::::`
schneider-electric	modicon_m580_bmep583020_firmware	< 4.01 `cpe:2.3:o:schneider-electric:modicon_m580_bmep583020_firmware::::::::`
schneider-electric	modicon_m580_bmep583040_firmware	< 4.01 `cpe:2.3:o:schneider-electric:modicon_m580_bmep583040_firmware::::::::`
schneider-electric	modicon_m580_bmep584020_firmware	< 4.01 `cpe:2.3:o:schneider-electric:modicon_m580_bmep584020_firmware::::::::`
schneider-electric	modicon_m580_bmep584040_firmware	< 4.01 `cpe:2.3:o:schneider-electric:modicon_m580_bmep584040_firmware::::::::`
schneider-electric	modicon_m580_bmep584040s_firmware	< 4.01 `cpe:2.3:o:schneider-electric:modicon_m580_bmep584040s_firmware::::::::`
schneider-electric	modicon_m580_bmep585040_firmware	< 4.01 `cpe:2.3:o:schneider-electric:modicon_m580_bmep585040_firmware::::::::`
schneider-electric	modicon_m580_bmep585040c_firmware	< 4.01 `cpe:2.3:o:schneider-electric:modicon_m580_bmep585040c_firmware::::::::`
schneider-electric	modicon_m580_bmep586040_firmware	< 4.01 `cpe:2.3:o:schneider-electric:modicon_m580_bmep586040_firmware::::::::`
schneider-electric	modicon_m580_bmep586040c_firmware	< 4.01 `cpe:2.3:o:schneider-electric:modicon_m580_bmep586040c_firmware::::::::`
schneider-electric	modicon_mc80_bmkc8020301_firmware	< 1.8 `cpe:2.3:o:schneider-electric:modicon_mc80_bmkc8020301_firmware::::::::`
schneider-electric	modicon_mc80_bmkc8020310_firmware	< 1.8 `cpe:2.3:o:schneider-electric:modicon_mc80_bmkc8020310_firmware::::::::`
schneider-electric	modicon_mc80_bmkc8030311_firmware	< 1.8 `cpe:2.3:o:schneider-electric:modicon_mc80_bmkc8030311_firmware::::::::`
schneider-electric	modicon_momentum_171cbu78090_firmware	All versions `cpe:2.3:o:schneider-electric:modicon_momentum_171cbu78090_firmware:-:::::::*`
schneider-electric	modicon_momentum_171cbu98090_firmware	All versions `cpe:2.3:o:schneider-electric:modicon_momentum_171cbu98090_firmware:-:::::::*`
schneider-electric	modicon_momentum_171cbu98091_firmware	All versions `cpe:2.3:o:schneider-electric:modicon_momentum_171cbu98091_firmware:-:::::::*`
schneider-electric	modicon_premium_tsxp57_1634m_firmware	All versions `cpe:2.3:o:schneider-electric:modicon_premium_tsxp57_1634m_firmware:-:::::::*`
schneider-electric	modicon_premium_tsxp57_2634m_firmware	All versions `cpe:2.3:o:schneider-electric:modicon_premium_tsxp57_2634m_firmware:-:::::::*`
schneider-electric	modicon_premium_tsxp57_2834m_firmware	All versions `cpe:2.3:o:schneider-electric:modicon_premium_tsxp57_2834m_firmware:-:::::::*`
schneider-electric	modicon_premium_tsxp57_454m_firmware	All versions `cpe:2.3:o:schneider-electric:modicon_premium_tsxp57_454m_firmware:-:::::::*`
schneider-electric	modicon_premium_tsxp57_4634m_firmware	All versions `cpe:2.3:o:schneider-electric:modicon_premium_tsxp57_4634m_firmware:-:::::::*`
schneider-electric	modicon_premium_tsxp57_554m_firmware	All versions `cpe:2.3:o:schneider-electric:modicon_premium_tsxp57_554m_firmware:-:::::::*`
schneider-electric	modicon_premium_tsxp57_5634m_firmware	All versions `cpe:2.3:o:schneider-electric:modicon_premium_tsxp57_5634m_firmware:-:::::::*`
schneider-electric	modicon_premium_tsxp57_6634m_firmware	All versions `cpe:2.3:o:schneider-electric:modicon_premium_tsxp57_6634m_firmware:-:::::::*`
schneider-electric	modicon_quantum_140cpu65150_firmware	All versions `cpe:2.3:o:schneider-electric:modicon_quantum_140cpu65150_firmware:-:::::::*`
schneider-electric	modicon_quantum_140cpu65150c_firmware	All versions `cpe:2.3:o:schneider-electric:modicon_quantum_140cpu65150c_firmware:-:::::::*`
schneider-electric	modicon_quantum_140cpu65160_firmware	All versions `cpe:2.3:o:schneider-electric:modicon_quantum_140cpu65160_firmware:-:::::::*`
schneider-electric	modicon_quantum_140cpu65160c_firmware	All versions `cpe:2.3:o:schneider-electric:modicon_quantum_140cpu65160c_firmware:-:::::::*`
schneider-electric	modicon_quantum_140noc78100_firmware	All versions `cpe:2.3:o:schneider-electric:modicon_quantum_140noc78100_firmware:-:::::::*`
schneider-electric	modicon_quantum_140noe77101_firmware	All versions `cpe:2.3:o:schneider-electric:modicon_quantum_140noe77101_firmware:-:::::::*`
schneider-electric	modicon_quantum_140noe77111_firmware	All versions `cpe:2.3:o:schneider-electric:modicon_quantum_140noe77111_firmware:-:::::::*`