A CWE-125: Out-of-bounds Read vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU (part numbers BMEP* and BMEH*, all versions), Modicon M340 CPU (part numbers BMXP34*, all versions), Modicon MC80 (part numbers BMKC80*, all versions), Modicon Momentum Ethernet CPU (part numbers 171CBU*, all versions), PLC Simulator for EcoStruxureª Control Expert, including all Unity Pro versions (former name of EcoStruxureª Control Expert, all versions), PLC Simulator for EcoStruxureª Process Expert including all HDCS versions (former name of EcoStruxureª Process Expert, all versions), Modicon Quantum CPU (part numbers 140CPU*, all versions), Modicon Premium CPU (part numbers TSXP5*, all versions).
UN CWE-125: Una vulnerabilidad de Lectura Fuera de Límites que podría causar una Denegación de Servicio en el controlador/simulador del PLC Modicon cuando se actualiza la aplicación del controlador con un archivo de proyecto especialmente diseñado se presenta en Modicon M580 CPU (números de pieza BMEP* y BMEH*, todas las versiones), CPU Modicon M340 (números de pieza BMXP34*, todas las versiones), Modicon MC80 (números de pieza BMKC80*, todas las versiones), CPU Modicon Momentum Ethernet (números de pieza 171CBU*, todas las versiones), PLC Simulator for EcoStruxureª Control Expert, incluyendo todas las versiones Unity Pro (antiguo nombre de EcoStruxureª Control Expert, todas las versiones), PLC Simulator for EcoStruxureª Process Expert incluyendo todas las versiones HDCS (antiguo nombre de EcoStruxureª Process Expert, todas las versiones), Modicon Quantum CPU (números de pieza 140CPU*, todas las versiones), Modicon Premium CPU (números de pieza TSXP5*, todas las versiones)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
AV:N/AC:L/Au:S/C:N/I:N/A:P
| Access Vector | NETWORK |
|---|---|
| Access Complexity | LOW |
| Authentication | SINGLE |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | PARTIAL |
| Source | Type | Description |
|---|---|---|
| [email protected] | Secondary |
en
CWE-125
|
| [email protected] | Primary |
en
CWE-125
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| schneider-electric | modicon_m340_bmxp341000 | - | <built-in method update of dict object at 0x7e60bacd67c0> | Hardware |
| schneider-electric | modicon_m340_bmxp342010 | - | <built-in method update of dict object at 0x7e6111c1da00> | Hardware |
| schneider-electric | modicon_m340_bmxp342020 | - | <built-in method update of dict object at 0x7e60a8897140> | Hardware |
| schneider-electric | modicon_m340_bmxp342030 | - | <built-in method update of dict object at 0x7e60bafad300> | Hardware |
| schneider-electric | modicon_m580_bmeh582040 | - | <built-in method update of dict object at 0x7e60bacd48c0> | Hardware |
| schneider-electric | modicon_m580_bmeh582040c | - | <built-in method update of dict object at 0x7e60bacd5a40> | Hardware |
| schneider-electric | modicon_m580_bmeh582040s | - | <built-in method update of dict object at 0x7e6111c1fe00> | Hardware |
| schneider-electric | modicon_m580_bmeh584040 | - | <built-in method update of dict object at 0x7e60bacd7700> | Hardware |
| schneider-electric | modicon_m580_bmeh584040c | - | <built-in method update of dict object at 0x7e60bacd53c0> | Hardware |
| schneider-electric | modicon_m580_bmeh584040s | - | <built-in method update of dict object at 0x7e60bacd51c0> | Hardware |
| schneider-electric | modicon_m580_bmeh586040 | - | <built-in method update of dict object at 0x7e6111c1cf40> | Hardware |
| schneider-electric | modicon_m580_bmeh586040c | - | <built-in method update of dict object at 0x7e60bafaf980> | Hardware |
| schneider-electric | modicon_m580_bmeh586040s | - | <built-in method update of dict object at 0x7e60bafac400> | Hardware |
| schneider-electric | modicon_m580_bmep581020 | - | <built-in method update of dict object at 0x7e60bacd7940> | Hardware |
| schneider-electric | modicon_m580_bmep581020h | - | <built-in method update of dict object at 0x7e60bacd4fc0> | Hardware |
| schneider-electric | modicon_m580_bmep582020 | - | <built-in method update of dict object at 0x7e60bacd5080> | Hardware |
| schneider-electric | modicon_m580_bmep582020h | - | <built-in method update of dict object at 0x7e60bacd5b40> | Hardware |
| schneider-electric | modicon_m580_bmep582040 | - | <built-in method update of dict object at 0x7e6111c1e640> | Hardware |
| schneider-electric | modicon_m580_bmep582040h | - | <built-in method update of dict object at 0x7e61419fc240> | Hardware |
| schneider-electric | modicon_m580_bmep582040s | - | <built-in method update of dict object at 0x7e61084070c0> | Hardware |
| schneider-electric | modicon_m580_bmep583020 | - | <built-in method update of dict object at 0x7e6111c1c2c0> | Hardware |
| schneider-electric | modicon_m580_bmep583040 | - | <built-in method update of dict object at 0x7e6111c1ce00> | Hardware |
| schneider-electric | modicon_m580_bmep584020 | - | <built-in method update of dict object at 0x7e60bacd54c0> | Hardware |
| schneider-electric | modicon_m580_bmep584040 | - | <built-in method update of dict object at 0x7e60bacd5980> | Hardware |
| schneider-electric | modicon_m580_bmep584040s | - | <built-in method update of dict object at 0x7e6108404400> | Hardware |
| schneider-electric | modicon_m580_bmep585040 | - | <built-in method update of dict object at 0x7e60a8895d80> | Hardware |
| schneider-electric | modicon_m580_bmep585040c | - | <built-in method update of dict object at 0x7e60bacd72c0> | Hardware |
| schneider-electric | modicon_m580_bmep586040 | - | <built-in method update of dict object at 0x7e60bacd5280> | Hardware |
| schneider-electric | modicon_m580_bmep586040c | - | <built-in method update of dict object at 0x7e6106846380> | Hardware |
| schneider-electric | modicon_mc80_bmkc8020301 | - | <built-in method update of dict object at 0x7e6108405500> | Hardware |
| schneider-electric | modicon_mc80_bmkc8020310 | - | <built-in method update of dict object at 0x7e60bacd7280> | Hardware |
| schneider-electric | modicon_mc80_bmkc8030311 | - | <built-in method update of dict object at 0x7e60bafad7c0> | Hardware |
| schneider-electric | modicon_momentum_171cbu78090 | - | <built-in method update of dict object at 0x7e61109d5700> | Hardware |
| schneider-electric | modicon_momentum_171cbu98090 | - | <built-in method update of dict object at 0x7e6112395ec0> | Hardware |
| schneider-electric | modicon_momentum_171cbu98091 | - | <built-in method update of dict object at 0x7e60bacd7380> | Hardware |
| schneider-electric | modicon_premium_tsxp57_1634m | - | <built-in method update of dict object at 0x7e60bacd6340> | Hardware |
| schneider-electric | modicon_premium_tsxp57_2634m | - | <built-in method update of dict object at 0x7e6111c1cc40> | Hardware |
| schneider-electric | modicon_premium_tsxp57_2834m | - | <built-in method update of dict object at 0x7e60bacd7780> | Hardware |
| schneider-electric | modicon_premium_tsxp57_454m | - | <built-in method update of dict object at 0x7e60bacd7f40> | Hardware |
| schneider-electric | modicon_premium_tsxp57_4634m | - | <built-in method update of dict object at 0x7e60eb26db00> | Hardware |
| schneider-electric | modicon_premium_tsxp57_554m | - | <built-in method update of dict object at 0x7e61109d7980> | Hardware |
| schneider-electric | modicon_premium_tsxp57_5634m | - | <built-in method update of dict object at 0x7e61109d5680> | Hardware |
| schneider-electric | modicon_premium_tsxp57_6634m | - | <built-in method update of dict object at 0x7e6108406500> | Hardware |
| schneider-electric | modicon_quantum_140cpu65150 | - | <built-in method update of dict object at 0x7e60eb26d340> | Hardware |
| schneider-electric | modicon_quantum_140cpu65150c | - | <built-in method update of dict object at 0x7e60eb26e700> | Hardware |
| schneider-electric | modicon_quantum_140cpu65160 | - | <built-in method update of dict object at 0x7e60eb26df00> | Hardware |
| schneider-electric | modicon_quantum_140cpu65160c | - | <built-in method update of dict object at 0x7e60bae0eac0> | Hardware |
| schneider-electric | plc_simulator_for_ecostruxure_control_expert | - | <built-in method update of dict object at 0x7e611239e200> | Hardware |
| schneider-electric | plc_simulator_for_ecostruxure_process_expert | - | <built-in method update of dict object at 0x7e60bacd6300> | Hardware |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:h:schneider-electric:modicon_m340_bmxp341000:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m340_bmxp342010:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m340_bmxp342020:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m340_bmxp342030:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmeh582040:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmeh582040c:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmeh582040s:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmeh584040:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmeh584040c:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmeh584040s:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmeh586040:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmeh586040c:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmeh586040s:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep581020:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep581020h:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep582020:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep582020h:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep582040:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep582040h:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep582040s:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep583020:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep583040:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep584020:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep584040:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep584040s:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep585040:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep585040c:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep586040:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep586040c:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_mc80_bmkc8020301:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_mc80_bmkc8020310:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_mc80_bmkc8030311:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_momentum_171cbu78090:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_momentum_171cbu98090:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_momentum_171cbu98091:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_1634m:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_2634m:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_2834m:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_454m:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_4634m:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_554m:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_5634m:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_6634m:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_quantum_140cpu65150:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_quantum_140cpu65150c:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_quantum_140cpu65160:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_quantum_140cpu65160c:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:plc_simulator_for_ecostruxure_control_expert:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:plc_simulator_for_ecostruxure_process_expert:-:*:*:*:*:*:*:* |