CVE-2023-25620mediumCWE-754

CVE-2023-25620: falha de média gravidade em Schneider Electric Legacy Modicon Premium CPUs…

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Modicon M340 CPU+ Monitorar Modicon M580 CPU

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.5epss 0.6%
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when a malicious project file is loaded onto the controller by an authenticated user.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
Schneider Electric · Legacy Modicon Premium CPUs (TSXP57*)Schneider Electric · Legacy Modicon Quantum (140CPU65*)Schneider Electric · Modicon M340 CPU (part numbers BMXP34*)Schneider Electric · Modicon M580 CPU (part numbers BMEP* and BMEH*)Schneider Electric · Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S)Schneider Electric · Modicon MC80 (BMKC80)Schneider Electric · Modicon Momentum Unity M1E Processor (171CBU*)
CVEs relacionadas — Schneider Electric Legacy Modicon Premium CPUs…

No mesmo produto, das mais perigosas para as menos.

CVE-2022-45789HIGHCVE-2022-45789EPSS 1.5%CVE-2022-45788HIGHCVE-2022-45788EPSS 1.2%CVE-2022-37301HIGHCVE-2022-37301EPSS 0.8%CVE-2021-22786HIGHCVE-2021-22786EPSS 0.6%CVE-2023-25619HIGHCVE-2023-25619EPSS 0.6%CVE-2024-8937HIGHCVE-2024-8937EPSS 0.6%