CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2022-37301
High (7.5) in schneider-electric. EPSS 0.8% chance of exploitation in the next 30 days.
A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus TCP protocol. Affected products: Modicon M340 CPU (part numbers BMXP34*)(V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*)(V3.22 and prior), Legacy Modicon Quantum/Premium(All Versions), Modicon Momentum MDI (171CBU*)(All Versions), Modicon MC80 (BMKC80)(V1.7 and prior)
Severity
- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
- CWE
- CWE-191
- Published
- Modified
- Record from
- the NVD, synced
Affected
- schneider-electric:modicon_m340_bmx_p34-2010_firmware
- schneider-electric:modicon_m340_bmx_p34-2030_firmware
- schneider-electric:modicon_m580_bmeh582040_firmware
- schneider-electric:modicon_m580_bmeh582040c_firmware
- schneider-electric:modicon_m580_bmeh582040s_firmware
- schneider-electric:modicon_m580_bmeh584040_firmware
- schneider-electric:modicon_m580_bmeh584040c_firmware
- schneider-electric:modicon_m580_bmeh584040s_firmware
- schneider-electric:modicon_m580_bmeh586040_firmware
- schneider-electric:modicon_m580_bmeh586040c_firmware
- schneider-electric:modicon_m580_bmeh586040s_firmware
- schneider-electric:modicon_m580_bmep581020_firmware
- schneider-electric:modicon_m580_bmep581020h_firmware
- schneider-electric:modicon_m580_bmep582020_firmware
- schneider-electric:modicon_m580_bmep582020h_firmware
- schneider-electric:modicon_m580_bmep582040_firmware
- schneider-electric:modicon_m580_bmep582040h_firmware
- schneider-electric:modicon_m580_bmep582040s_firmware
- schneider-electric:modicon_m580_bmep583020_firmware
- schneider-electric:modicon_m580_bmep583040_firmware
- schneider-electric:modicon_m580_bmep584020_firmware
- schneider-electric:modicon_m580_bmep584040_firmware
- schneider-electric:modicon_m580_bmep584040s_firmware
- schneider-electric:modicon_m580_bmep585040_firmware
- schneider-electric:modicon_m580_bmep585040c_firmware
- schneider-electric:modicon_m580_bmep586040_firmware
- schneider-electric:modicon_m580_bmep586040c_firmware
- schneider-electric:modicon_mc80_bmkc8020301_firmware
- schneider-electric:modicon_mc80_bmkc8020310_firmware
- schneider-electric:modicon_mc80_bmkc8030311_firmware
- schneider-electric:modicon_momentum_171cbu78090_firmware
- schneider-electric:modicon_momentum_171cbu98090_firmware
- schneider-electric:modicon_momentum_171cbu98091_firmware
- schneider-electric:modicon_premium_tsxp57_1634m_firmware
- schneider-electric:modicon_premium_tsxp57_2634m_firmware
- schneider-electric:modicon_premium_tsxp57_2834m_firmware
- schneider-electric:modicon_premium_tsxp57_454m_firmware
- schneider-electric:modicon_premium_tsxp57_4634m_firmware
- schneider-electric:modicon_premium_tsxp57_554m_firmware
- schneider-electric:modicon_premium_tsxp57_5634m_firmware
- schneider-electric:modicon_premium_tsxp57_6634m_firmware
- schneider-electric:modicon_quantum_140cpu65150_firmware
- schneider-electric:modicon_quantum_140cpu65150c_firmware
- schneider-electric:modicon_quantum_140cpu65160_firmware
- schneider-electric:modicon_quantum_140cpu65160c_firmware
- schneider-electric:modicon_quantum_140noc78100_firmware
- schneider-electric:modicon_quantum_140noe77101_firmware
- schneider-electric:modicon_quantum_140noe77111_firmware