Fiche vulnérabilité
CVE-2022-45789 : faille critique schneider-electric ecostruxure control… (CVSS 9.8)
Description
A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbus functions on the controller when hijacking an authenticated Modbus session. Affected Products: EcoStruxure Control Expert (All Versions), EcoStruxure Process Expert (All Versions), Modicon M340 CPU - part numbers BMXP34* (All Versions), Modicon M580 CPU - part numbers BMEP* and BMEH* (All Versions), Modicon M580 CPU Safety - part numbers BMEP58*S and BMEH58*S (All Versions)
En bref
- Sévérité
- Critique (CVSS 9.8)
- Vecteur CVSS
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Exploitation active
- Non signalée par la CISA
- Publication
- 31 janv. 2023
- Dernière mise à jour
- 17 juin 2026
Produits concernés
- schneider-electric ecostruxure control expert
- schneider-electric ecostruxure process expert
- schneider-electric modicon m340 bmxp341000 firmware
- schneider-electric modicon m340 bmxp342000 firmware
- schneider-electric modicon m340 bmxp342010 firmware
- schneider-electric modicon m340 bmxp3420102 firmware
- schneider-electric modicon m340 bmxp342020 firmware
- schneider-electric modicon m340 bmxp342020h firmware
- schneider-electric modicon m340 bmxp342030 firmware
- schneider-electric modicon m340 bmxp3420302 firmware
- schneider-electric modicon m340 bmxp3420302h firmware
- schneider-electric modicon m340 bmxp342030h firmware
- schneider-electric modicon m580 bmep581020 firmware
- schneider-electric modicon m580 bmep581020h firmware
- schneider-electric modicon m580 bmep582020 firmware
- schneider-electric modicon m580 bmep582020h firmware
- schneider-electric modicon m580 bmep582040 firmware
- schneider-electric modicon m580 bmep582040h firmware
- schneider-electric modicon m580 bmep582040s firmware
- schneider-electric modicon m580 bmep583020 firmware