CVE-2021-22787: falha de alta gravidade em Modicon M340 CPUs: BMXP34 (Versions prior to V3.
Publicada em · Atualizada em
Seguir esta CVE+ Monitorar Modicon M340 CPUs: BMXP34, Modicon M340 X80 Ethernet Communication Modules: BMXNOE0100, BMXNOE0110, BMXNOC0401, BMXNOR0200H RTU, Modicon Premium Processors with integrated Ethernet: TSXP574634, TSXP575634, TSXP576634, Modicon Quantum Processors with Integrated Ethernet: 140CPU65xxxxx, Modicon Quantum Communication Modules: 140NOE771x1, 140NOC78x00, 140NOC77101, Modicon Premium Communication Modules: TSXETY4103, TSXETY5103
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.5epss 1.1%
A CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of the device when an attacker sends a specially crafted HTTP request to the web server of the device. Affected Product: Modicon M340 CPUs: BMXP34 (Versions prior to V3.40), Modicon M340 X80 Ethernet Communication Modules: BMXNOE0100 (H), BMXNOE0110 (H), BMXNOC0401, BMXNOR0200H RTU (All Versions), Modicon Premium Processors with integrated Ethernet (Copro): TSXP574634, TSXP575634, TSXP576634 (All Versions), Modicon Quantum Processors with Integrated Ethernet (Copro): 140CPU65xxxxx (All Versions), Modicon Quantum Communication Modules: 140NOE771x1, 140NOC78x00, 140NOC77101 (All Versions), Modicon Premium Communication Modules: TSXETY4103, TSXETY5103 (All Versions)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H