CVE-2022-37301

Published: Nov 22, 2022Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus TCP protocol. Affected products: Modicon M340 CPU (part numbers BMXP34*)(V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*)(V3.22 and prior), Legacy Modicon Quantum/Premium(All Versions), Modicon Momentum MDI (171CBU*)(All Versions), Modicon MC80 (BMKC80)(V1.7 and prior)

Affected (48)

Schneider Electric

48 products

Modicon M340 Bmx P34 2010 Firmware

Modicon M340 Bmx P34 2030 Firmware

Modicon M580 Bmeh582040 Firmware

Modicon M580 Bmeh582040c Firmware

Modicon M580 Bmeh582040s Firmware

Modicon M580 Bmeh584040 Firmware

Modicon M580 Bmeh584040c Firmware

Modicon M580 Bmeh584040s Firmware

Modicon M580 Bmeh586040 Firmware

Modicon M580 Bmeh586040c Firmware

Modicon M580 Bmeh586040s Firmware

Modicon M580 Bmep581020 Firmware

Modicon M580 Bmep581020h Firmware

Modicon M580 Bmep582020 Firmware

Modicon M580 Bmep582020h Firmware

Modicon M580 Bmep582040 Firmware

Modicon M580 Bmep582040h Firmware

Modicon M580 Bmep582040s Firmware

Modicon M580 Bmep583020 Firmware

Modicon M580 Bmep583040 Firmware

Modicon M580 Bmep584020 Firmware

Modicon M580 Bmep584040 Firmware

Modicon M580 Bmep584040s Firmware

Modicon M580 Bmep585040 Firmware

Modicon M580 Bmep585040c Firmware

Modicon M580 Bmep586040 Firmware

Modicon M580 Bmep586040c Firmware

Modicon Mc80 Bmkc8020301 Firmware

Modicon Mc80 Bmkc8020310 Firmware

Modicon Mc80 Bmkc8030311 Firmware

Modicon Momentum 171cbu78090 Firmware

Modicon Momentum 171cbu98090 Firmware

Modicon Momentum 171cbu98091 Firmware

Modicon Premium Tsxp57 1634m Firmware

Modicon Premium Tsxp57 2634m Firmware

Modicon Premium Tsxp57 2834m Firmware

Modicon Premium Tsxp57 454m Firmware

Modicon Premium Tsxp57 4634m Firmware

Modicon Premium Tsxp57 554m Firmware

Modicon Premium Tsxp57 5634m Firmware

Modicon Premium Tsxp57 6634m Firmware

Modicon Quantum 140cpu65150 Firmware

Modicon Quantum 140cpu65150c Firmware

Modicon Quantum 140cpu65160 Firmware

Modicon Quantum 140cpu65160c Firmware

Modicon Quantum 140noc78100 Firmware

Modicon Quantum 140noe77101 Firmware

Modicon Quantum 140noe77111 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmx P34 2010 Firmware	Before 3.50

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmx P34 2010	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmx P34 2030 Firmware	Before 3.50

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmx P34 2030	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmeh582040 Firmware	Before 4.01

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmeh582040	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmeh582040c Firmware	Before 4.01

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmeh582040c	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmeh582040s Firmware	Before 4.01

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmeh582040s	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmeh584040 Firmware	Before 4.01

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmeh584040	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmeh584040c Firmware	Before 4.01

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmeh584040c	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmeh584040s Firmware	Before 4.01

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmeh584040s	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmeh586040 Firmware	Before 4.01

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmeh586040	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmeh586040c Firmware	Before 4.01

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmeh586040c	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmeh586040s Firmware	Before 4.01

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmeh586040s	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep581020 Firmware	Before 4.01

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep581020	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep581020h Firmware	Before 4.01

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep581020h	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep582020 Firmware	Before 4.01

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep582020	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep582020h Firmware	Before 4.01

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep582020h	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep582040 Firmware	Before 4.01

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep582040	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep582040h Firmware	Before 4.01

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep582040h	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep582040s Firmware	Before 4.01

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep582040s	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep583020 Firmware	Before 4.01

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep583020	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep583040 Firmware	Before 4.01

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep583040	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep584020 Firmware	Before 4.01

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep584020	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep584040 Firmware	Before 4.01

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep584040	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep584040s Firmware	Before 4.01

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep584040s	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep585040 Firmware	Before 4.01

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep585040	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep585040c Firmware	Before 4.01

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep585040c	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep586040 Firmware	Before 4.01

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep586040	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep586040c Firmware	Before 4.01

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep586040c	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon Mc80 Bmkc8020301 Firmware	Before 1.8

Running on/with	Platform Versions
Schneider Electric Modicon Mc80 Bmkc8020301	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon Mc80 Bmkc8020310 Firmware	Before 1.8

Running on/with	Platform Versions
Schneider Electric Modicon Mc80 Bmkc8020310	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon Mc80 Bmkc8030311 Firmware	Before 1.8

Running on/with	Platform Versions
Schneider Electric Modicon Mc80 Bmkc8030311	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon Momentum 171cbu78090 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon Momentum 171cbu78090	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon Momentum 171cbu98090 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon Momentum 171cbu98090	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon Momentum 171cbu98091 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon Momentum 171cbu98091	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon Premium Tsxp57 1634m Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon Premium Tsxp57 1634m	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon Premium Tsxp57 2634m Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon Premium Tsxp57 2634m	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon Premium Tsxp57 2834m Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon Premium Tsxp57 2834m	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon Premium Tsxp57 454m Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon Premium Tsxp57 454m	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon Premium Tsxp57 4634m Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon Premium Tsxp57 4634m	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon Premium Tsxp57 554m Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon Premium Tsxp57 554m	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon Premium Tsxp57 5634m Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon Premium Tsxp57 5634m	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon Premium Tsxp57 6634m Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon Premium Tsxp57 6634m	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon Quantum 140cpu65150 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon Quantum 140cpu65150	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon Quantum 140cpu65150c Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon Quantum 140cpu65150c	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon Quantum 140cpu65160 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon Quantum 140cpu65160	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon Quantum 140cpu65160c Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon Quantum 140cpu65160c	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon Quantum 140noc78100 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon Quantum 140noc78100	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon Quantum 140noe77101 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon Quantum 140noe77101	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon Quantum 140noe77111 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon Quantum 140noe77111	All versions

Related CWEs

CWE-191

Integer Underflow (Wrap or Wraparound)

The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

References (2)

https://www.se.com/us/en/download/document/SEVD-2022-221-02/

Source: cybersecurity@se.com

Vendor Advisory

https://www.se.com/us/en/download/document/SEVD-2022-221-02/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.