Critical severity · published Sep 12, 2022
CVE-2022-37300
A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists that could cause unauthorized access in read and write mode to the controller when…
9.8
CVSS
0.8%
EPSS
No
On KEV
Description
A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists that could cause unauthorized access in read and write mode to the controller when communicating over Modbus. Affected Products: EcoStruxure Control Expert Including all Unity Pro versions (former name of EcoStruxure Control Expert) (V15.0 SP1 and prior), EcoStruxure Process Expert, Including all versions of EcoStruxure Hybrid DCS (former name of EcoStruxure Process Expert) (V2021 and prior), Modicon M340 CPU (part numbers BMXP34*) (V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*) (V3.20 and prior).
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 55% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EC
Ecostruxure Control Expert · Schneider-electric
before 15.1 · source: NVD
EP
Ecostruxure Process Expert · Schneider-electric
through 2021 · source: NVD
MM
Modicon M340 Bmxp341000 Firmware · Schneider-electric
before 3.50 · source: NVD
MM
Modicon M340 Bmxp342000 Firmware · Schneider-electric
before 3.50 · source: NVD
MM
Modicon M340 Bmxp342010 Firmware · Schneider-electric
before 3.50 · source: NVD
MM
Modicon M340 Bmxp3420102 Firmware · Schneider-electric
before 3.50 · source: NVD
MM
Modicon M340 Bmxp342020 Firmware · Schneider-electric
before 3.50 · source: NVD
MM
Modicon M340 Bmxp342020h Firmware · Schneider-electric
before 3.50 · source: NVD
MM
Modicon M340 Bmxp342030 Firmware · Schneider-electric
before 3.50 · source: NVD
MM
Modicon M340 Bmxp3420302 Firmware · Schneider-electric
before 3.50 · source: NVD
MM
Modicon M340 Bmxp3420302h Firmware · Schneider-electric
before 3.50 · source: NVD
MM
Modicon M340 Bmxp342030h Firmware · Schneider-electric
before 3.50 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-37300
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-37300
Patch
https://www.se.com/us/en/download/document/SEVD-2022-221-01/
More from Ecostruxure Control Expert
9.8
CVE-2022-45789
A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbus functions on the controller when hijacking an…
9.8
CVE-2022-45788
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality &…
9.8
CVE-2022-26507
A heap-based buffer overflow exists in XML Decompression DecodeTreeBlock in AT&T Labs Xmill 0.7
9.8
CVE-2020-28212
A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could…
9.8
CVE-2020-7475
A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), reflective DLL, vulnerability exists in EcoStruxure Control Expert…