Insufficient Data Authenticity Verification in X80 Advanced RTU Communication Module by Schneider Electric

CVE-2022-34763

What is CVE-2022-34763?

A vulnerability exists in Schneider Electric’s X80 advanced RTU Communication Module and OPC UA Modicon Communication Module, stemming from insufficient verification of data authenticity. This flaw allows unauthorized firmware images to be loaded, potentially compromising the integrity of the devices. The issue affects specific versions of the communication modules, emphasizing the need for users to ensure firmware authenticity to safeguard against security breaches.

References