CVE-2022-0222

Published: Nov 22, 2022Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A CWE-269: Improper Privilege Management vulnerability exists that could cause a denial of service of the Ethernet communication of the controller when sending a specific request over SNMP. Affected products: Modicon M340 CPUs(BMXP34* versions prior to V3.40), Modicon M340 X80 Ethernet Communication modules:BMXNOE0100 (H), BMXNOE0110 (H), BMXNOR0200H RTU(BMXNOE* all versions)(BMXNOR* versions prior to v1.7 IR24)

Affected (14)

Schneider Electric

14 products

Modicon M340 Bmxp341000 Firmware

Modicon M340 Bmxp342000 Firmware

Modicon M340 Bmxp342010 Firmware

Modicon M340 Bmxp3420102 Firmware

Modicon M340 Bmxp342020 Firmware

Modicon M340 Bmxp342020h Firmware

Modicon M340 Bmxp342030 Firmware

Modicon M340 Bmxp3420302 Firmware

Modicon M340 Bmxp3420302h Firmware

Modicon M340 Bmxp342030h Firmware

Modicon M340 Bmxnoe0100 Firmware

Modicon M340 Bmxnoe0110 Firmware

Modicon M340 Bmxnoe0110h Firmware

Modicon M340 Bmxnor0200h Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp341000 Firmware	Before 3.50

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp341000	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp342000 Firmware	Before 3.50

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp342000	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp342010 Firmware	Before 3.50

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp342010	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp3420102 Firmware	Before 3.50

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp3420102	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp342020 Firmware	Before 3.50

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp342020	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp342020h Firmware	Before 3.50

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp342020h	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp342030 Firmware	Before 3.50

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp342030	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp3420302 Firmware	Before 3.50

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp3420302	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp3420302h Firmware	Before 3.50

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp3420302h	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp342030h Firmware	Before 3.50

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp342030h	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxnoe0100 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxnoe0100	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxnoe0110 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxnoe0110	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxnoe0110h Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxnoe0110h	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxnor0200h Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxnor0200h	All versions

Related CWEs

CWE-269

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (2)

https://www.se.com/us/en/download/document/SEVD-2022-102-02/

Source: cybersecurity@se.com

Vendor Advisory

https://www.se.com/us/en/download/document/SEVD-2022-102-02/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.