CVSS 3.1
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Атакува се
Време до експлоатация
Атакува се по мрежата, при специфични условия, без вход и след действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката не може да се автоматизира
Описание
Оригинално описание
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when a malicious project file is loaded onto the controller. Affected Products: EcoStruxure Control Expert (All Versions), EcoStruxure Process Expert (All Versions), Modicon M340 CPU - part numbers BMXP34* (All Versions), Modicon M580 CPU - part numbers BMEP* and BMEH* (All Versions), Modicon M580 CPU Safety - part numbers BMEP58*S and BMEH58*S (All Versions), Modicon Momentum Unity M1E Processor - 171CBU* (All Versions), Modicon MC80 - BMKC80 (All Versions), Legacy Modicon Quantum - 140CPU65* and Premium CPUs - TSXP57* (All Versions)
Засегнати продукти
- Schneider Electric EcoStruxure Control Expert : All Versions
- Schneider Electric EcoStruxure Process Expert: All Versions
- Schneider Electric Modicon M340 CPU (part numbers BMXP34*): All Versions
- Schneider Electric Modicon M580 CPU (part numbers BMEP* and BMEH*) : All Versions
- Schneider Electric Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S): All Versions
- Schneider Electric Modicon Momentum Unity M1E Processor (171CBU*): All Versions
- Schneider Electric Modicon MC80 (BMKC80): All Versions
- Schneider Electric Legacy Modicon Quantum (140CPU65*) and Premium CPUs (TSXP57*): All Versions
Вид слабост
История
- 30 януари 2023 Публикувано