NULL Pointer Dereference Vulnerability in X80 Advanced RTU and OPC UA Modicon Modules by Schneider Electric

CVE-2022-34761

Summary

A NULL Pointer Dereference vulnerability has been identified in Schneider Electric's X80 Advanced RTU Communication Module and OPC UA Modicon Communication Module. This vulnerability can result in a denial of service condition, particularly when the webserver processes JSON content. Affected versions of the X80 module include V2.01 and later, while the OPC UA module is susceptible in versions V1.10 and prior. Users of these products are advised to take necessary precautions to mitigate potential impacts.

References