Buffer Overflow Vulnerability in Schneider Electric's Communication Modules
CVE-2022-34764

5.9MEDIUM

Key Information:

Vendor
Schneider Electric
Status
Opc Ua Modicon Communication Module
X80 Advanced Rtu Communication Module
Vendor
CVE Published:
13 July 2022

Summary

A vulnerability exists in Schneider Electric's X80 advanced RTU Communication Module and OPC UA Modicon Communication Module that allows for improper restrictions during URL parsing. This flaw can potentially lead to a denial of service, adversely affecting system availability and reliability. Affected versions of the products must be patched to mitigate the risk associated with this vulnerability effectively.

Affected Version(s)

OPC UA Modicon Communication Module BMENUA0100

X80 advanced RTU Communication Module BMENOR2200H V1.0

References

https://download.schneider-electric.com/files?p_enDocType...
x_refsource_MISC

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.