Critical severity · published Jul 14, 2021
CVE-2021-22779
Authentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Control…
9.1
CVSS
1.1%
EPSS
No
On KEV
Description
Authentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Control Expert V15.0 SP1, EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), SCADAPack RemoteConnect for x70 (all versions), Modicon M580 CPU (all versions - part numbers BMEP* and BMEH*), Modicon M340 CPU (all versions - part numbers BMXP34*), that could cause unauthorized access in read and write mode to the controller by spoofing the Modbus communication between the engineering software and the controller.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 64% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EC
Ecostruxure Control Expert · Schneider-electric
before 15.0; 15.0; 15.0 · source: NVD
EP
Ecostruxure Process Expert · Schneider-electric
All versions, or not specified · source: NVD
MM
Modicon M340 Bmxp341000 Firmware · Schneider-electric
All versions, or not specified · source: NVD
MM
Modicon M340 Bmxp342010 Firmware · Schneider-electric
All versions, or not specified · source: NVD
MM
Modicon M340 Bmxp342020 Firmware · Schneider-electric
All versions, or not specified · source: NVD
MM
Modicon M340 Bmxp342030 Firmware · Schneider-electric
All versions, or not specified · source: NVD
MM
Modicon M580 Bmeh582040 Firmware · Schneider-electric
All versions, or not specified · source: NVD
MM
Modicon M580 Bmeh582040c Firmware · Schneider-electric
All versions, or not specified · source: NVD
MM
Modicon M580 Bmeh582040s Firmware · Schneider-electric
All versions, or not specified · source: NVD
MM
Modicon M580 Bmeh584040 Firmware · Schneider-electric
All versions, or not specified · source: NVD
MM
Modicon M580 Bmeh584040c Firmware · Schneider-electric
All versions, or not specified · source: NVD
MM
Modicon M580 Bmeh584040s Firmware · Schneider-electric
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-22779
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-22779
Vendor Advisory
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01
More from Ecostruxure Control Expert
9.8
CVE-2022-45789
A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbus functions on the controller when hijacking an…
9.8
CVE-2022-45788
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality &…
9.8
CVE-2022-37300
A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists that could cause unauthorized access in read and write mode to the controller when…
9.8
CVE-2022-26507
A heap-based buffer overflow exists in XML Decompression DecodeTreeBlock in AT&T Labs Xmill 0.7
9.8
CVE-2020-28212
A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could…