A CWE-787: Out-of-bounds Write vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU (part numbers BMEP* and BMEH*, all versions), Modicon M340 CPU (part numbers BMXP34*, all versions), Modicon MC80 (part numbers BMKC80*, all versions), Modicon Momentum Ethernet CPU (part numbers 171CBU*, all versions), PLC Simulator for EcoStruxureª Control Expert, including all Unity Pro versions (former name of EcoStruxureª Control Expert, all versions), PLC Simulator for EcoStruxureª Process Expert including all HDCS versions (former name of EcoStruxureª Process Expert, all versions), Modicon Quantum CPU (part numbers 140CPU*, all versions), Modicon Premium CPU (part numbers TSXP5*, all versions).
Una CWE-787: Una vulnerabilidad de Escritura Fuera de Límites que podría causar una Denegación de Servicio en el controlador/simulador del PLC Modicon cuando se actualiza la aplicación del controlador con un archivo de proyecto especialmente diseñado se presenta en Modicon M580 CPU (números de pieza BMEP* y BMEH*, todas las versiones), Modicon M340 CPU (números de pieza BMXP34*, todas las versiones), Modicon MC80 (números de pieza BMKC80*, todas las versiones), Modicon Momentum Ethernet CPU (números de pieza 171CBU*, todas las versiones), PLC Simulator para EcoStruxureª Control Expert, incluidas todas las versiones Unity Pro (antiguo nombre de EcoStruxureª Control Expert, todas las versiones), PLC Simulator para EcoStruxureª Process Expert, incluidas todas las versiones HDCS (antiguo nombre de EcoStruxureª Process Expert, todas las versiones), Modicon Quantum CPU (números de pieza 140CPU*, todas las versiones), Modicon Premium CPU (números de pieza TSXP5*, todas las versiones)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
AV:N/AC:L/Au:S/C:N/I:N/A:P
| Access Vector | NETWORK |
|---|---|
| Access Complexity | LOW |
| Authentication | SINGLE |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | PARTIAL |
| Source | Type | Description |
|---|---|---|
| [email protected] | Secondary |
en
CWE-787
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| schneider-electric | modicon_m340_bmxp341000 | - | <built-in method update of dict object at 0x7e60bafaf500> | Hardware |
| schneider-electric | modicon_m340_bmxp342010 | - | <built-in method update of dict object at 0x7e613c4c17c0> | Hardware |
| schneider-electric | modicon_m340_bmxp342020 | - | <built-in method update of dict object at 0x7e60bafad100> | Hardware |
| schneider-electric | modicon_m340_bmxp342030 | - | <built-in method update of dict object at 0x7e61109d5500> | Hardware |
| schneider-electric | modicon_m580_bmeh582040 | - | <built-in method update of dict object at 0x7e60bafaeb40> | Hardware |
| schneider-electric | modicon_m580_bmeh582040c | - | <built-in method update of dict object at 0x7e613c44c5c0> | Hardware |
| schneider-electric | modicon_m580_bmeh582040s | - | <built-in method update of dict object at 0x7e60bacd63c0> | Hardware |
| schneider-electric | modicon_m580_bmeh584040 | - | <built-in method update of dict object at 0x7e6108404b40> | Hardware |
| schneider-electric | modicon_m580_bmeh584040c | - | <built-in method update of dict object at 0x7e61109d58c0> | Hardware |
| schneider-electric | modicon_m580_bmeh584040s | - | <built-in method update of dict object at 0x7e60bafadf80> | Hardware |
| schneider-electric | modicon_m580_bmeh586040 | - | <built-in method update of dict object at 0x7e60bafac100> | Hardware |
| schneider-electric | modicon_m580_bmeh586040c | - | <built-in method update of dict object at 0x7e6112304900> | Hardware |
| schneider-electric | modicon_m580_bmeh586040s | - | <built-in method update of dict object at 0x7e60bafad680> | Hardware |
| schneider-electric | modicon_m580_bmep581020 | - | <built-in method update of dict object at 0x7e60bafadf00> | Hardware |
| schneider-electric | modicon_m580_bmep581020h | - | <built-in method update of dict object at 0x7e61347e4180> | Hardware |
| schneider-electric | modicon_m580_bmep582020 | - | <built-in method update of dict object at 0x7e6111c1c180> | Hardware |
| schneider-electric | modicon_m580_bmep582020h | - | <built-in method update of dict object at 0x7e6111c1f700> | Hardware |
| schneider-electric | modicon_m580_bmep582040 | - | <built-in method update of dict object at 0x7e60bafae800> | Hardware |
| schneider-electric | modicon_m580_bmep582040h | - | <built-in method update of dict object at 0x7e60bacd7dc0> | Hardware |
| schneider-electric | modicon_m580_bmep582040s | - | <built-in method update of dict object at 0x7e6107f39140> | Hardware |
| schneider-electric | modicon_m580_bmep583020 | - | <built-in method update of dict object at 0x7e61419fc240> | Hardware |
| schneider-electric | modicon_m580_bmep583040 | - | <built-in method update of dict object at 0x7e60bafaf180> | Hardware |
| schneider-electric | modicon_m580_bmep584020 | - | <built-in method update of dict object at 0x7e60bafad5c0> | Hardware |
| schneider-electric | modicon_m580_bmep584040 | - | <built-in method update of dict object at 0x7e61109d6b80> | Hardware |
| schneider-electric | modicon_m580_bmep584040s | - | <built-in method update of dict object at 0x7e613c198dc0> | Hardware |
| schneider-electric | modicon_m580_bmep585040 | - | <built-in method update of dict object at 0x7e60bacd6540> | Hardware |
| schneider-electric | modicon_m580_bmep585040c | - | <built-in method update of dict object at 0x7e60eb26f600> | Hardware |
| schneider-electric | modicon_m580_bmep586040 | - | <built-in method update of dict object at 0x7e6112d6ad40> | Hardware |
| schneider-electric | modicon_m580_bmep586040c | - | <built-in method update of dict object at 0x7e6108407780> | Hardware |
| schneider-electric | modicon_mc80_bmkc8020301 | - | <built-in method update of dict object at 0x7e60bafaf040> | Hardware |
| schneider-electric | modicon_mc80_bmkc8020310 | - | <built-in method update of dict object at 0x7e61109d4b40> | Hardware |
| schneider-electric | modicon_mc80_bmkc8030311 | - | <built-in method update of dict object at 0x7e60bafad440> | Hardware |
| schneider-electric | modicon_momentum_171cbu78090 | - | <built-in method update of dict object at 0x7e60bafaf480> | Hardware |
| schneider-electric | modicon_momentum_171cbu98090 | - | <built-in method update of dict object at 0x7e60bafaf140> | Hardware |
| schneider-electric | modicon_momentum_171cbu98091 | - | <built-in method update of dict object at 0x7e6107f3bb00> | Hardware |
| schneider-electric | modicon_premium_tsxp57_1634m | - | <built-in method update of dict object at 0x7e6107f3ba00> | Hardware |
| schneider-electric | modicon_premium_tsxp57_2634m | - | <built-in method update of dict object at 0x7e6107f38780> | Hardware |
| schneider-electric | modicon_premium_tsxp57_2834m | - | <built-in method update of dict object at 0x7e6107f38680> | Hardware |
| schneider-electric | modicon_premium_tsxp57_454m | - | <built-in method update of dict object at 0x7e6107f3bb80> | Hardware |
| schneider-electric | modicon_premium_tsxp57_4634m | - | <built-in method update of dict object at 0x7e6107f39440> | Hardware |
| schneider-electric | modicon_premium_tsxp57_554m | - | <built-in method update of dict object at 0x7e6107f38b00> | Hardware |
| schneider-electric | modicon_premium_tsxp57_5634m | - | <built-in method update of dict object at 0x7e6107f38f80> | Hardware |
| schneider-electric | modicon_premium_tsxp57_6634m | - | <built-in method update of dict object at 0x7e6107f3a940> | Hardware |
| schneider-electric | modicon_quantum_140cpu65150 | - | <built-in method update of dict object at 0x7e6107f38640> | Hardware |
| schneider-electric | modicon_quantum_140cpu65150c | - | <built-in method update of dict object at 0x7e60bacd4e40> | Hardware |
| schneider-electric | modicon_quantum_140cpu65160 | - | <built-in method update of dict object at 0x7e6107fb4400> | Hardware |
| schneider-electric | modicon_quantum_140cpu65160c | - | <built-in method update of dict object at 0x7e6107fb7c40> | Hardware |
| schneider-electric | plc_simulator_for_ecostruxure_control_expert | - | <built-in method update of dict object at 0x7e6107fb42c0> | Hardware |
| schneider-electric | plc_simulator_for_ecostruxure_process_expert | - | <built-in method update of dict object at 0x7e61109d71c0> | Hardware |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:h:schneider-electric:modicon_m340_bmxp341000:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m340_bmxp342010:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m340_bmxp342020:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m340_bmxp342030:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmeh582040:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmeh582040c:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmeh582040s:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmeh584040:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmeh584040c:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmeh584040s:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmeh586040:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmeh586040c:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmeh586040s:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep581020:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep581020h:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep582020:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep582020h:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep582040:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep582040h:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep582040s:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep583020:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep583040:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep584020:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep584040:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep584040s:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep585040:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep585040c:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep586040:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep586040c:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_mc80_bmkc8020301:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_mc80_bmkc8020310:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_mc80_bmkc8030311:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_momentum_171cbu78090:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_momentum_171cbu98090:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_momentum_171cbu98091:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_1634m:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_2634m:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_2834m:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_454m:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_4634m:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_554m:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_5634m:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_6634m:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_quantum_140cpu65150:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_quantum_140cpu65150c:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_quantum_140cpu65160:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_quantum_140cpu65160c:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:plc_simulator_for_ecostruxure_control_expert:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:plc_simulator_for_ecostruxure_process_expert:-:*:*:*:*:*:*:* |