Skip to main content

Ecostruxure Control Expert CVE-2022-37300

CRITICAL
Weak Password Recovery Mechanism for Forgotten Password (CWE-640)
2022-09-12 cybersecurity@se.com
Authentication Bypass Ecostruxure Control Expert Ecostruxure Process Expert Modicon M340 Bmxp341000 Firmware Modicon M340 Bmxp342000 Firmware Modicon M340 Bmxp342010 Firmware Modicon M340 Bmxp3420102 Firmware Modicon M340 Bmxp342020 Firmware Modicon M340 Bmxp342020H Firmware Modicon M340 Bmxp342030 Firmware Modicon M340 Bmxp3420302 Firmware Modicon M340 Bmxp3420302H Firmware Modicon M340 Bmxp342030H Firmware Modicon M580 Bmeh582040 Firmware Modicon M580 Bmeh582040C Firmware Modicon M580 Bmeh582040S Firmware Modicon M580 Bmeh584040 Firmware Modicon M580 Bmeh584040C Firmware Modicon M580 Bmeh584040S Firmware Modicon M580 Bmeh586040 Firmware Modicon M580 Bmeh586040C Firmware Modicon M580 Bmeh586040S Firmware Modicon M580 Bmep581020 Firmware Modicon M580 Bmep581020H Firmware Modicon M580 Bmep582020 Firmware Modicon M580 Bmep582020H Firmware Modicon M580 Bmep582040 Firmware Modicon M580 Bmep582040H Firmware Modicon M580 Bmep583020 Firmware Modicon M580 Bmep583040 Firmware Modicon M580 Bmep584020 Firmware Modicon M580 Bmep584040 Firmware Modicon M580 Bmep584040S Firmware Modicon M580 Bmep585040 Firmware Modicon M580 Bmep585040C Firmware Modicon M580 Bmep586040 Firmware Modicon M580 Bmep586040C Firmware
9.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
9.8 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Sep 12, 2022 - 18:15 nvd
CRITICAL 9.8

DescriptionNVD

A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists that could cause unauthorized access in read and write mode to the controller when communicating over Modbus. Affected Products: EcoStruxure Control Expert Including all Unity Pro versions (former name of EcoStruxure Control Expert) (V15.0 SP1 and prior), EcoStruxure Process Expert, Including all versions of EcoStruxure Hybrid DCS (former name of EcoStruxure Process Expert) (V2021 and prior), Modicon M340 CPU (part numbers BMXP34*) (V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*) (V3.20 and prior).

AnalysisAI

A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists that could cause unauthorized access in read and write mode to the controller when communicating over Modbus. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-640. A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists that could cause unauthorized access in read and write mode to the controller when communicating over Modbus. Affected Products: EcoStruxure Control Expert Including all Unity Pro versions (former name of EcoStruxure Control Expert) (V15.0 SP1 and prior), EcoStruxure Process Expert, Including all versions of EcoStruxure Hybrid DCS (former name of EcoStruxure Process Expert) (V2021 and prior), Modicon M340 CPU (part numbers BMXP34*) (V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*) (V3.20 and prior). Affected products include: Schneider-Electric Ecostruxure Control Expert, Schneider-Electric Ecostruxure Process Expert, Schneider-Electric Modicon M340 Bmxp341000 Firmware, Schneider-Electric Modicon M340 Bmxp342000 Firmware, Schneider-Electric Modicon M340 Bmxp342010 Firmware.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Ecostruxure Control Expert

View all
CVE-2020-7559 HIGH POC
7.5 Nov 19

A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists in PLC Simulator

CVE-2022-26507 CRITICAL
9.8 Apr 14

A heap-based buffer overflow exists in XML Decompression DecodeTreeBlock in AT&T Labs Xmill 0.7. Rated critical severity
CVE-2020-28212 CRITICAL
9.8 Nov 19

A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists in PLC Simulator on EcoStruxur
CVE-2020-7475 CRITICAL
9.8 Mar 23

A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), reflective
CVE-2021-22779 CRITICAL
9.1 Jul 14

Authentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, i
CVE-2023-27976 HIGH
8.8 Apr 18

A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause remote code execution when a valid
CVE-2020-28213 HIGH
8.8 Nov 19

A CWE-494: Download of Code Without Integrity Check vulnerability exists in PLC Simulator on EcoStruxureª Control Expert
CVE-2020-7560 HIGH
8.6 Dec 11

A CWE-123: Write-what-where Condition vulnerability exists in EcoStruxure™ Control Expert (all versions) and Unity Pro (
CVE-2020-28211 HIGH
7.8 Nov 19

A CWE-863: Incorrect Authorization vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro)

CVE-2020-7538 HIGH
7.5 Nov 19

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in PLC Simulator on EcoStruxureª Co
CVE-2021-22780 HIGH
7.1 Jul 14

Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1
CVE-2021-22778 HIGH
7.1 Jul 14

Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1

Same weakness CWE-640 – Weak Password Recovery Mechanism for Forgotten Password

View all
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-7615 HIGH POC
8.8
CVE-2017-8295 MEDIUM POC
5.9
CVE-2025-6216 CRITICAL POC
9.8
CVE-2025-47646 CRITICAL POC
9.8
CVE-2015-7257 HIGH POC
7.5
CVE-2022-50910 CRITICAL POC
9.8
CVE-2026-12417 CRITICAL POC
9.8

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2017-10271 HIGH POC
7.5
CVE-2015-1427 CRITICAL POC
9.8
CVE-2025-3248 CRITICAL POC
9.8

Share

CVE-2022-37300 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy