A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when a malicious project file is loaded onto the controller. Affected Products: EcoStruxure Control Expert (All Versions), EcoStruxure Process Expert (All Versions), Modicon M340 CPU - part numbers BMXP34* (All Versions), Modicon M580 CPU - part numbers BMEP* and BMEH* (All Versions), Modicon M580 CPU Safety - part numbers BMEP58*S and BMEH58*S (All Versions), Modicon Momentum Unity M1E Processor - 171CBU* (All Versions), Modicon MC80 - BMKC80 (All Versions), Legacy Modicon Quantum - 140CPU65* and Premium CPUs - TSXP57* (All Versions)

Project Subscriptions

Vendors Products
Schneider-electric Subscribe
Ecostruxure Control Expert Subscribe
Ecostruxure Process Expert Subscribe
Modicon M340 Bmxp341000 Subscribe
Modicon M340 Bmxp341000 Firmware Subscribe
Modicon M340 Bmxp342000 Subscribe
Modicon M340 Bmxp342000 Firmware Subscribe
Modicon M340 Bmxp342010 Subscribe
Modicon M340 Bmxp3420102 Subscribe
Modicon M340 Bmxp3420102 Firmware Subscribe
Modicon M340 Bmxp342010 Firmware Subscribe
Modicon M340 Bmxp342020 Subscribe
Modicon M340 Bmxp342020 Firmware Subscribe
Modicon M340 Bmxp342020h Subscribe
Modicon M340 Bmxp342020h Firmware Subscribe
Modicon M340 Bmxp342030 Subscribe
Modicon M340 Bmxp3420302 Subscribe
Modicon M340 Bmxp3420302 Firmware Subscribe
Modicon M340 Bmxp3420302h Subscribe
Modicon M340 Bmxp3420302h Firmware Subscribe
Modicon M340 Bmxp342030 Firmware Subscribe
Modicon M340 Bmxp342030h Subscribe
Modicon M340 Bmxp342030h Firmware Subscribe
Modicon M580 Bmeh582040 Subscribe
Modicon M580 Bmeh582040 Firmware Subscribe
Modicon M580 Bmeh582040c Subscribe
Modicon M580 Bmeh582040c Firmware Subscribe
Modicon M580 Bmeh582040s Subscribe
Modicon M580 Bmeh582040s Firmware Subscribe
Modicon M580 Bmeh584040 Subscribe
Modicon M580 Bmeh584040 Firmware Subscribe
Modicon M580 Bmeh584040c Subscribe
Modicon M580 Bmeh584040c Firmware Subscribe
Modicon M580 Bmeh584040s Subscribe
Modicon M580 Bmeh584040s Firmware Subscribe
Modicon M580 Bmeh586040 Subscribe
Modicon M580 Bmeh586040 Firmware Subscribe
Modicon M580 Bmeh586040c Subscribe
Modicon M580 Bmeh586040c Firmware Subscribe
Modicon M580 Bmeh586040s Subscribe
Modicon M580 Bmeh586040s Firmware Subscribe
Modicon M580 Bmep581020 Subscribe
Modicon M580 Bmep581020 Firmware Subscribe
Modicon M580 Bmep581020h Subscribe
Modicon M580 Bmep581020h Firmware Subscribe
Modicon M580 Bmep582020 Subscribe
Modicon M580 Bmep582020 Firmware Subscribe
Modicon M580 Bmep582020h Subscribe
Modicon M580 Bmep582020h Firmware Subscribe
Modicon M580 Bmep582040 Subscribe
Modicon M580 Bmep582040 Firmware Subscribe
Modicon M580 Bmep582040h Subscribe
Modicon M580 Bmep582040h Firmware Subscribe
Modicon M580 Bmep582040s Subscribe
Modicon M580 Bmep582040s Firmware Subscribe
Modicon M580 Bmep583020 Subscribe
Modicon M580 Bmep583020 Firmware Subscribe
Modicon M580 Bmep583040 Subscribe
Modicon M580 Bmep583040 Firmware Subscribe
Modicon M580 Bmep584020 Subscribe
Modicon M580 Bmep584020 Firmware Subscribe
Modicon M580 Bmep584040 Subscribe
Modicon M580 Bmep584040 Firmware Subscribe
Modicon M580 Bmep584040s Subscribe
Modicon M580 Bmep584040s Firmware Subscribe
Modicon M580 Bmep585040 Subscribe
Modicon M580 Bmep585040 Firmware Subscribe
Modicon M580 Bmep585040c Subscribe
Modicon M580 Bmep585040c Firmware Subscribe
Modicon M580 Bmep586040 Subscribe
Modicon M580 Bmep586040 Firmware Subscribe
Modicon M580 Bmep586040c Subscribe
Modicon M580 Bmep586040c Firmware Subscribe
Modicon Mc80 Bmkc8020301 Subscribe
Modicon Mc80 Bmkc8020301 Firmware Subscribe
Modicon Mc80 Bmkc8020310 Subscribe
Modicon Mc80 Bmkc8020310 Firmware Subscribe
Modicon Mc80 Bmkc8030311 Subscribe
Modicon Mc80 Bmkc8030311 Firmware Subscribe
Modicon Momentum 171cbu78090 Subscribe
Modicon Momentum 171cbu78090 Firmware Subscribe
Modicon Momentum 171cbu98090 Subscribe
Modicon Momentum 171cbu98090 Firmware Subscribe
Modicon Momentum 171cbu98091 Subscribe
Modicon Momentum 171cbu98091 Firmware Subscribe
Modicon Premium Tsxp57 1634m Subscribe
Modicon Premium Tsxp57 1634m Firmware Subscribe
Modicon Premium Tsxp57 2634m Subscribe
Modicon Premium Tsxp57 2634m Firmware Subscribe
Modicon Premium Tsxp57 2834m Subscribe
Modicon Premium Tsxp57 2834m Firmware Subscribe
Modicon Premium Tsxp57 454m Subscribe
Modicon Premium Tsxp57 454m Firmware Subscribe
Modicon Premium Tsxp57 4634m Subscribe
Modicon Premium Tsxp57 4634m Firmware Subscribe
Modicon Premium Tsxp57 554m Subscribe
Modicon Premium Tsxp57 554m Firmware Subscribe
Modicon Premium Tsxp57 5634m Subscribe
Modicon Premium Tsxp57 5634m Firmware Subscribe
Modicon Premium Tsxp57 6634m Subscribe
Modicon Premium Tsxp57 6634m Firmware Subscribe
Modicon Quantum 140cpu65150 Subscribe
Modicon Quantum 140cpu65150 Firmware Subscribe
Modicon Quantum 140cpu65150c Subscribe
Modicon Quantum 140cpu65150c Firmware Subscribe
Modicon Quantum 140cpu65160 Subscribe
Modicon Quantum 140cpu65160 Firmware Subscribe
Modicon Quantum 140cpu65160c Subscribe
Modicon Quantum 140cpu65160c Firmware Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2022-48644 A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when a malicious project file is loaded onto the controller. Affected Products: EcoStruxure Control Expert (All Versions), EcoStruxure Process Expert (All Versions), Modicon M340 CPU - part numbers BMXP34* (All Versions), Modicon M580 CPU - part numbers BMEP* and BMEH* (All Versions), Modicon M580 CPU Safety - part numbers BMEP58*S and BMEH58*S (All Versions), Modicon Momentum Unity M1E Processor - 171CBU* (All Versions), Modicon MC80 - BMKC80 (All Versions), Legacy Modicon Quantum - 140CPU65* and Premium CPUs - TSXP57* (All Versions)
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Wed, 05 Feb 2025 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: schneider

Published:

Updated: 2025-02-05T20:07:14.882Z

Reserved: 2022-11-22T00:00:00.000Z

Link: CVE-2022-45788

cve-icon Vulnrichment

Updated: 2024-08-03T14:17:04.131Z

cve-icon NVD

Status : Modified

Published: 2023-01-30T13:15:09.310

Modified: 2024-11-21T07:29:43.093

Link: CVE-2022-45788

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses