Insufficient Data Authenticity Verification in X80 Advanced RTU Communication Module by Schneider Electric
CVE-2022-34763

5.9MEDIUM

Key Information:

Vendor

Schneider Electric
Status
Opc Ua Modicon Communication Module
X80 Advanced Rtu Communication Module
Vendor
CVE Published:
13 July 2022

What is CVE-2022-34763?

A vulnerability exists in Schneider Electric’s X80 advanced RTU Communication Module and OPC UA Modicon Communication Module, stemming from insufficient verification of data authenticity. This flaw allows unauthorized firmware images to be loaded, potentially compromising the integrity of the devices. The issue affects specific versions of the communication modules, emphasizing the need for users to ensure firmware authenticity to safeguard against security breaches.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

OPC UA Modicon Communication Module BMENUA0100

X80 advanced RTU Communication Module V2.01

References

https://download.schneider-electric.com/files?p_enDocType...
x_refsource_MISC

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.