A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU (part numbers BMEP* and BMEH*, all versions), Modicon M340 CPU (part numbers BMXP34*, all versions), Modicon MC80 (part numbers BMKC80*, all versions), Modicon Momentum Ethernet CPU (part numbers 171CBU*, all versions), PLC Simulator for EcoStruxureª Control Expert, including all Unity Pro versions (former name of EcoStruxureª Control Expert, all versions), PLC Simulator for EcoStruxureª Process Expert including all HDCS versions (former name of EcoStruxureª Process Expert, all versions), Modicon Quantum CPU (part numbers 140CPU*, all versions), Modicon Premium CPU (part numbers TSXP5*, all versions).
Una CWE-119: Una vulnerabilidad de Restricción Inapropiada de Operaciones dentro de los Límites de un Búfer de Memoria que podría causar una Denegación de Servicio en el controlador/simulador del PLC Modicon cuando se actualiza la aplicación del controlador con un archivo de proyecto especialmente diseñado se presenta en Modicon M580 CPU (números de pieza BMEP* and BMEH*, todas las versiones), Modicon M340 CPU (números de pieza BMXP34*, todas las versiones), Modicon MC80 (números de pieza BMKC80*, todas las versiones), Modicon Momentum Ethernet CPU (números de pieza 171CBU*, todas las versiones), PLC Simulator for EcoStruxureª Control Expert, incluyendo todas las versiones Unity Pro (antiguo nombre de EcoStruxureª Control Expert, todas las versiones), PLC Simulator for EcoStruxureª Process Expert incluyendo todas las versiones HDCS (antiguo nombre de EcoStruxureª Process Expert, todas las versiones), Modicon Quantum CPU (números de pieza 140CPU*, todas las versiones), Modicon Premium CPU (números de pieza TSXP5*, todas las versiones)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
AV:N/AC:L/Au:S/C:N/I:N/A:P
| Access Vector | NETWORK |
|---|---|
| Access Complexity | LOW |
| Authentication | SINGLE |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | PARTIAL |
| Source | Type | Description |
|---|---|---|
| [email protected] | Secondary |
en
CWE-119
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| schneider-electric | modicon_m340_bmxp341000 | - | <built-in method update of dict object at 0x7e61114e1080> | Hardware |
| schneider-electric | modicon_m340_bmxp342010 | - | <built-in method update of dict object at 0x7e60a88ab140> | Hardware |
| schneider-electric | modicon_m340_bmxp342020 | - | <built-in method update of dict object at 0x7e61114e3980> | Hardware |
| schneider-electric | modicon_m340_bmxp342030 | - | <built-in method update of dict object at 0x7e60e8343880> | Hardware |
| schneider-electric | modicon_m580_bmeh582040 | - | <built-in method update of dict object at 0x7e61114e1500> | Hardware |
| schneider-electric | modicon_m580_bmeh582040c | - | <built-in method update of dict object at 0x7e60e8340fc0> | Hardware |
| schneider-electric | modicon_m580_bmeh582040s | - | <built-in method update of dict object at 0x7e60a88a92c0> | Hardware |
| schneider-electric | modicon_m580_bmeh584040 | - | <built-in method update of dict object at 0x7e60a8a54200> | Hardware |
| schneider-electric | modicon_m580_bmeh584040c | - | <built-in method update of dict object at 0x7e60e8c7de40> | Hardware |
| schneider-electric | modicon_m580_bmeh584040s | - | <built-in method update of dict object at 0x7e61114e39c0> | Hardware |
| schneider-electric | modicon_m580_bmeh586040 | - | <built-in method update of dict object at 0x7e61114e0e00> | Hardware |
| schneider-electric | modicon_m580_bmeh586040c | - | <built-in method update of dict object at 0x7e60a8a57f80> | Hardware |
| schneider-electric | modicon_m580_bmeh586040s | - | <built-in method update of dict object at 0x7e6110a55400> | Hardware |
| schneider-electric | modicon_m580_bmep581020 | - | <built-in method update of dict object at 0x7e6112cb5880> | Hardware |
| schneider-electric | modicon_m580_bmep581020h | - | <built-in method update of dict object at 0x7e61114e2500> | Hardware |
| schneider-electric | modicon_m580_bmep582020 | - | <built-in method update of dict object at 0x7e60a88a97c0> | Hardware |
| schneider-electric | modicon_m580_bmep582020h | - | <built-in method update of dict object at 0x7e61114e22c0> | Hardware |
| schneider-electric | modicon_m580_bmep582040 | - | <built-in method update of dict object at 0x7e6071ead240> | Hardware |
| schneider-electric | modicon_m580_bmep582040h | - | <built-in method update of dict object at 0x7e60a88ab640> | Hardware |
| schneider-electric | modicon_m580_bmep582040s | - | <built-in method update of dict object at 0x7e60e83417c0> | Hardware |
| schneider-electric | modicon_m580_bmep583020 | - | <built-in method update of dict object at 0x7e60a88aba00> | Hardware |
| schneider-electric | modicon_m580_bmep583040 | - | <built-in method update of dict object at 0x7e61114e1ac0> | Hardware |
| schneider-electric | modicon_m580_bmep584020 | - | <built-in method update of dict object at 0x7e60e8c7f8c0> | Hardware |
| schneider-electric | modicon_m580_bmep584040 | - | <built-in method update of dict object at 0x7e60e8c7e7c0> | Hardware |
| schneider-electric | modicon_m580_bmep584040s | - | <built-in method update of dict object at 0x7e60a8a56d80> | Hardware |
| schneider-electric | modicon_m580_bmep585040 | - | <built-in method update of dict object at 0x7e6071eafec0> | Hardware |
| schneider-electric | modicon_m580_bmep585040c | - | <built-in method update of dict object at 0x7e60e8341b00> | Hardware |
| schneider-electric | modicon_m580_bmep586040 | - | <built-in method update of dict object at 0x7e60e8c7db00> | Hardware |
| schneider-electric | modicon_m580_bmep586040c | - | <built-in method update of dict object at 0x7e6100e95100> | Hardware |
| schneider-electric | modicon_mc80_bmkc8020301 | - | <built-in method update of dict object at 0x7e60bae4b580> | Hardware |
| schneider-electric | modicon_mc80_bmkc8020310 | - | <built-in method update of dict object at 0x7e60e8342a80> | Hardware |
| schneider-electric | modicon_mc80_bmkc8030311 | - | <built-in method update of dict object at 0x7e60e8c7db40> | Hardware |
| schneider-electric | modicon_momentum_171cbu78090 | - | <built-in method update of dict object at 0x7e60ba9bff80> | Hardware |
| schneider-electric | modicon_momentum_171cbu98090 | - | <built-in method update of dict object at 0x7e613c3cc600> | Hardware |
| schneider-electric | modicon_momentum_171cbu98091 | - | <built-in method update of dict object at 0x7e60ba9bc500> | Hardware |
| schneider-electric | modicon_premium_tsxp57_1634m | - | <built-in method update of dict object at 0x7e60bb8857c0> | Hardware |
| schneider-electric | modicon_premium_tsxp57_2634m | - | <built-in method update of dict object at 0x7e61114e0680> | Hardware |
| schneider-electric | modicon_premium_tsxp57_2834m | - | <built-in method update of dict object at 0x7e60ba9be600> | Hardware |
| schneider-electric | modicon_premium_tsxp57_454m | - | <built-in method update of dict object at 0x7e60ba9beac0> | Hardware |
| schneider-electric | modicon_premium_tsxp57_4634m | - | <built-in method update of dict object at 0x7e60ba9bc880> | Hardware |
| schneider-electric | modicon_premium_tsxp57_554m | - | <built-in method update of dict object at 0x7e60ba9bda40> | Hardware |
| schneider-electric | modicon_premium_tsxp57_5634m | - | <built-in method update of dict object at 0x7e60ba9bfbc0> | Hardware |
| schneider-electric | modicon_premium_tsxp57_6634m | - | <built-in method update of dict object at 0x7e60ba9bcc40> | Hardware |
| schneider-electric | modicon_quantum_140cpu65150 | - | <built-in method update of dict object at 0x7e60a88a8c40> | Hardware |
| schneider-electric | modicon_quantum_140cpu65150c | - | <built-in method update of dict object at 0x7e6071eae000> | Hardware |
| schneider-electric | modicon_quantum_140cpu65160 | - | <built-in method update of dict object at 0x7e6071eac3c0> | Hardware |
| schneider-electric | modicon_quantum_140cpu65160c | - | <built-in method update of dict object at 0x7e6071eada40> | Hardware |
| schneider-electric | plc_simulator_for_ecostruxure_control_expert | - | <built-in method update of dict object at 0x7e60a88a8fc0> | Hardware |
| schneider-electric | plc_simulator_for_ecostruxure_process_expert | - | <built-in method update of dict object at 0x7e6071eac480> | Hardware |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:h:schneider-electric:modicon_m340_bmxp341000:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m340_bmxp342010:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m340_bmxp342020:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m340_bmxp342030:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmeh582040:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmeh582040c:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmeh582040s:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmeh584040:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmeh584040c:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmeh584040s:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmeh586040:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmeh586040c:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmeh586040s:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep581020:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep581020h:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep582020:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep582020h:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep582040:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep582040h:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep582040s:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep583020:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep583040:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep584020:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep584040:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep584040s:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep585040:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep585040c:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep586040:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep586040c:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_mc80_bmkc8020301:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_mc80_bmkc8020310:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_mc80_bmkc8030311:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_momentum_171cbu78090:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_momentum_171cbu98090:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_momentum_171cbu98091:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_1634m:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_2634m:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_2834m:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_454m:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_4634m:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_554m:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_5634m:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_6634m:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_quantum_140cpu65150:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_quantum_140cpu65150c:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_quantum_140cpu65160:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_quantum_140cpu65160c:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:plc_simulator_for_ecostruxure_control_expert:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:plc_simulator_for_ecostruxure_process_expert:-:*:*:*:*:*:*:* |