Skip to main content

Modicon M340 Bmxp341000 CVE-2021-22791

MEDIUM
Out-of-bounds Write (CWE-787)
2021-09-02 cybersecurity@se.com
Denial Of Service Memory Corruption Buffer Overflow Modicon M340 Bmxp341000 Modicon M340 Bmxp342010 Modicon M340 Bmxp342020 Modicon M340 Bmxp342030 Modicon M580 Bmeh582040 Modicon M580 Bmeh582040C Modicon M580 Bmeh582040S Modicon M580 Bmeh584040 Modicon M580 Bmeh584040C Modicon M580 Bmeh584040S Modicon M580 Bmeh586040 Modicon M580 Bmeh586040C Modicon M580 Bmeh586040S Modicon M580 Bmep581020 Modicon M580 Bmep581020H Modicon M580 Bmep582020 Modicon M580 Bmep582020H Modicon M580 Bmep582040 Modicon M580 Bmep582040H Modicon M580 Bmep582040S Modicon M580 Bmep583020 Modicon M580 Bmep583040 Modicon M580 Bmep584020 Modicon M580 Bmep584040 Modicon M580 Bmep584040S Modicon M580 Bmep585040 Modicon M580 Bmep585040C Modicon M580 Bmep586040 Modicon M580 Bmep586040C Modicon Mc80 Bmkc8020301 Modicon Mc80 Bmkc8020310 Modicon Mc80 Bmkc8030311 Modicon Momentum 171Cbu78090 Modicon Momentum 171Cbu98090 Modicon Momentum 171Cbu98091 Modicon Premium Tsxp57 1634M Modicon Premium Tsxp57 2634M Modicon Premium Tsxp57 2834M Modicon Premium Tsxp57 454M Modicon Premium Tsxp57 4634M Modicon Premium Tsxp57 554M Modicon Premium Tsxp57 5634M Modicon Premium Tsxp57 6634M Modicon Quantum 140Cpu65150 Modicon Quantum 140Cpu65150C Modicon Quantum 140Cpu65160 Modicon Quantum 140Cpu65160C Plc Simulator For Ecostruxure Control Expert Plc Simulator For Ecostruxure Process Expert
6.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
6.5 MEDIUM
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

1
CVE Published
Sep 02, 2021 - 17:15 cve.org
MEDIUM 6.5

DescriptionCVE.org

A CWE-787: Out-of-bounds Write vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU (part numbers BMEP* and BMEH*, all versions), Modicon M340 CPU (part numbers BMXP34*, all versions), Modicon MC80 (part numbers BMKC80*, all versions), Modicon Momentum Ethernet CPU (part numbers 171CBU*, all versions), PLC Simulator for EcoStruxureª Control Expert, including all Unity Pro versions (former name of EcoStruxureª Control Expert, all versions), PLC Simulator for EcoStruxureª Process Expert including all HDCS versions (former name of EcoStruxureª Process Expert, all versions), Modicon Quantum CPU (part numbers 140CPU*, all versions), Modicon Premium CPU (part numbers TSXP5*, all versions).

AnalysisAI

A CWE-787: Out-of-bounds Write vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Technical ContextAI

This vulnerability is classified as Out-of-bounds Write (CWE-787), which allows attackers to write data beyond allocated buffer boundaries leading to code execution or crashes. A CWE-787: Out-of-bounds Write vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU (part numbers BMEP* and BMEH*, all versions), Modicon M340 CPU (part numbers BMXP34*, all versions), Modicon MC80 (part numbers BMKC80*, all versions), Modicon Momentum Ethernet CPU (part numbers 171CBU*, all versions), PLC Simulator for EcoStruxureª Control Expert, including all Unity Pro versions (former name of EcoStruxureª Control Expert, all versions), PLC Simulator for EcoStruxureª Process Expert including all HDCS versions (former name of EcoStruxureª Process Expert, all versions), Modicon Quantum CPU (part numbers 140CPU*, all versions), Modicon Premium CPU (part numbers TSXP5*, all versions). Affected products include: Schneider-Electric Modicon M340 Bmxp341000, Schneider-Electric Modicon M340 Bmxp342010, Schneider-Electric Modicon M340 Bmxp342020, Schneider-Electric Modicon M340 Bmxp342030, Schneider-Electric Modicon M580 Bmeh582040.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Validate write boundaries, use memory-safe languages, enable compiler protections (ASLR, stack canaries).

More in Modicon M340 Bmxp341000

View all
CVE-2021-22792 HIGH
7.5 Sep 02

A CWE-476: NULL Pointer Dereference vulnerability that could cause a Denial of Service on the Modicon PLC controller / s
CVE-2021-22790 MEDIUM
6.5 Sep 02

A CWE-125: Out-of-bounds Read vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulat
CVE-2021-22789 MEDIUM
6.5 Sep 02

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability that could cause a Deni

Same weakness CWE-787 – Out-of-bounds Write

View all
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2012-1889 HIGH POC
8.8
CVE-2010-3333 HIGH POC
7.8
CVE-2014-1761 HIGH POC
7.8
CVE-2009-3129 HIGH POC
7.8
CVE-2021-1732 HIGH POC
7.8
CVE-2013-3346 CRITICAL POC
9.8

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Share

CVE-2021-22791 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy