Modicon M580 Bmep582040S Firmware

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-37301 HIGH This Week

A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus TCP protocol. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Integer Overflow Denial Of Service Modicon M340 Bmx P34 2010 Firmware Modicon M340 Bmx P34 2030 Firmware Modicon M580 Bmeh582040 Firmware +45

NVD

CVSS 3.1

7.5

EPSS

0.7%

CVE-2021-22779 CRITICAL Act Now

Authentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Control Expert V15.0 SP1,. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Ecostruxure Control Expert Ecostruxure Process Expert Remoteconnect Modicon M580 Bmep581020 Firmware +28

NVD VulDB

CVSS 3.1

9.1

EPSS

0.2%

CVE-2022-37301

EPSS 1% CVSS 7.5

HIGH This Week

Integer Overflow Denial Of Service Modicon M340 Bmx P34 2010 Firmware +47

NVD

CVE-2021-22779

EPSS 0% CVSS 9.1

CRITICAL Act Now

Authentication Bypass Ecostruxure Control Expert Ecostruxure Process Expert +30

NVD VulDB