A CWE-476: NULL Pointer Dereference vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU (part numbers BMEP* and BMEH*, all versions), Modicon M340 CPU (part numbers BMXP34*, all versions), Modicon MC80 (part numbers BMKC80*, all versions), Modicon Momentum Ethernet CPU (part numbers 171CBU*, all versions), PLC Simulator for EcoStruxureª Control Expert, including all Unity Pro versions (former name of EcoStruxureª Control Expert, all versions), PLC Simulator for EcoStruxureª Process Expert including all HDCS versions (former name of EcoStruxureª Process Expert, all versions), Modicon Quantum CPU (part numbers 140CPU*, all versions), Modicon Premium CPU (part numbers TSXP5*, all versions).
Una CWE-476: Una vulnerabilidad de Desreferencia de Puntero NULL que podría causar una Denegación de Servicio en el controlador/simulador del PLC Modicon cuando se actualiza la aplicación del controlador con un archivo de proyecto especialmente diseñado se presenta en Modicon M580 CPU (números de pieza BMEP* and BMEH*, todas las versiones), Modicon M340 CPU (números de pieza BMXP34*, todas las versiones), Modicon MC80 (números de pieza BMKC80*, todas las versiones), Modicon Momentum Ethernet CPU (números de pieza 171CBU*, todas las versiones), PLC Simulator para EcoStruxureª Control Expert, incluidas todas las versiones Unity Pro (antiguo nombre de EcoStruxureª Control Expert, todas las versiones), PLC Simulator para EcoStruxureª Process Expert, incluidas todas las versiones HDCS (antiguo nombre de EcoStruxureª Process Expert, todas las versiones), Modicon Quantum CPU (números de pieza 140CPU*, todas las versiones), Modicon Premium CPU (números de pieza TSXP5*, todas las versiones)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | NONE |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
AV:N/AC:L/Au:N/C:N/I:N/A:P
| Access Vector | NETWORK |
|---|---|
| Access Complexity | LOW |
| Authentication | NONE |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | PARTIAL |
| Source | Type | Description |
|---|---|---|
| [email protected] | Secondary |
en
CWE-476
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| schneider-electric | modicon_m340_bmxp341000 | - | <built-in method update of dict object at 0x7e60b9fb7fc0> | Hardware |
| schneider-electric | modicon_m340_bmxp342010 | - | <built-in method update of dict object at 0x7e60eb2e2bc0> | Hardware |
| schneider-electric | modicon_m340_bmxp342020 | - | <built-in method update of dict object at 0x7e61342e65c0> | Hardware |
| schneider-electric | modicon_m340_bmxp342030 | - | <built-in method update of dict object at 0x7e60e885a5c0> | Hardware |
| schneider-electric | modicon_m580_bmeh582040 | - | <built-in method update of dict object at 0x7e60b9fb6880> | Hardware |
| schneider-electric | modicon_m580_bmeh582040c | - | <built-in method update of dict object at 0x7e60b9fb7980> | Hardware |
| schneider-electric | modicon_m580_bmeh582040s | - | <built-in method update of dict object at 0x7e6100e88f80> | Hardware |
| schneider-electric | modicon_m580_bmeh584040 | - | <built-in method update of dict object at 0x7e60bae0eb00> | Hardware |
| schneider-electric | modicon_m580_bmeh584040c | - | <built-in method update of dict object at 0x7e6112390fc0> | Hardware |
| schneider-electric | modicon_m580_bmeh584040s | - | <built-in method update of dict object at 0x7e60b9fb79c0> | Hardware |
| schneider-electric | modicon_m580_bmeh586040 | - | <built-in method update of dict object at 0x7e60eb2e2e80> | Hardware |
| schneider-electric | modicon_m580_bmeh586040c | - | <built-in method update of dict object at 0x7e6112392b40> | Hardware |
| schneider-electric | modicon_m580_bmeh586040s | - | <built-in method update of dict object at 0x7e60eb2e0f40> | Hardware |
| schneider-electric | modicon_m580_bmep581020 | - | <built-in method update of dict object at 0x7e6071ead500> | Hardware |
| schneider-electric | modicon_m580_bmep581020h | - | <built-in method update of dict object at 0x7e60eb226b00> | Hardware |
| schneider-electric | modicon_m580_bmep582020 | - | <built-in method update of dict object at 0x7e60eb226dc0> | Hardware |
| schneider-electric | modicon_m580_bmep582020h | - | <built-in method update of dict object at 0x7e60eb2e0800> | Hardware |
| schneider-electric | modicon_m580_bmep582040 | - | <built-in method update of dict object at 0x7e6071eaf180> | Hardware |
| schneider-electric | modicon_m580_bmep582040h | - | <built-in method update of dict object at 0x7e6071eaec00> | Hardware |
| schneider-electric | modicon_m580_bmep582040s | - | <built-in method update of dict object at 0x7e60eb2e3040> | Hardware |
| schneider-electric | modicon_m580_bmep583020 | - | <built-in method update of dict object at 0x7e60eb2e0e00> | Hardware |
| schneider-electric | modicon_m580_bmep583040 | - | <built-in method update of dict object at 0x7e6112306dc0> | Hardware |
| schneider-electric | modicon_m580_bmep584020 | - | <built-in method update of dict object at 0x7e613c318c80> | Hardware |
| schneider-electric | modicon_m580_bmep584040 | - | <built-in method update of dict object at 0x7e60eb26b8c0> | Hardware |
| schneider-electric | modicon_m580_bmep584040s | - | <built-in method update of dict object at 0x7e6112f62840> | Hardware |
| schneider-electric | modicon_m580_bmep585040 | - | <built-in method update of dict object at 0x7e613c3a8880> | Hardware |
| schneider-electric | modicon_m580_bmep585040c | - | <built-in method update of dict object at 0x7e60eb2e2200> | Hardware |
| schneider-electric | modicon_m580_bmep586040 | - | <built-in method update of dict object at 0x7e60eb26a180> | Hardware |
| schneider-electric | modicon_m580_bmep586040c | - | <built-in method update of dict object at 0x7e613c3a9140> | Hardware |
| schneider-electric | modicon_mc80_bmkc8020301 | - | <built-in method update of dict object at 0x7e60eb2e01c0> | Hardware |
| schneider-electric | modicon_mc80_bmkc8020310 | - | <built-in method update of dict object at 0x7e60eb2e38c0> | Hardware |
| schneider-electric | modicon_mc80_bmkc8030311 | - | <built-in method update of dict object at 0x7e60eb2e3700> | Hardware |
| schneider-electric | modicon_momentum_171cbu78090 | - | <built-in method update of dict object at 0x7e60ba793e40> | Hardware |
| schneider-electric | modicon_momentum_171cbu98090 | - | <built-in method update of dict object at 0x7e60e86cee00> | Hardware |
| schneider-electric | modicon_momentum_171cbu98091 | - | <built-in method update of dict object at 0x7e60a88aee00> | Hardware |
| schneider-electric | modicon_premium_tsxp57_1634m | - | <built-in method update of dict object at 0x7e61109d5e40> | Hardware |
| schneider-electric | modicon_premium_tsxp57_2634m | - | <built-in method update of dict object at 0x7e60ba1a0600> | Hardware |
| schneider-electric | modicon_premium_tsxp57_2834m | - | <built-in method update of dict object at 0x7e60e86ce7c0> | Hardware |
| schneider-electric | modicon_premium_tsxp57_454m | - | <built-in method update of dict object at 0x7e60e8874340> | Hardware |
| schneider-electric | modicon_premium_tsxp57_4634m | - | <built-in method update of dict object at 0x7e60baa0af80> | Hardware |
| schneider-electric | modicon_premium_tsxp57_554m | - | <built-in method update of dict object at 0x7e61109d5b40> | Hardware |
| schneider-electric | modicon_premium_tsxp57_5634m | - | <built-in method update of dict object at 0x7e60bae0cb00> | Hardware |
| schneider-electric | modicon_premium_tsxp57_6634m | - | <built-in method update of dict object at 0x7e60bae0c280> | Hardware |
| schneider-electric | modicon_quantum_140cpu65150 | - | <built-in method update of dict object at 0x7e60bae0e980> | Hardware |
| schneider-electric | modicon_quantum_140cpu65150c | - | <built-in method update of dict object at 0x7e60bae0e000> | Hardware |
| schneider-electric | modicon_quantum_140cpu65160 | - | <built-in method update of dict object at 0x7e60bae0c4c0> | Hardware |
| schneider-electric | modicon_quantum_140cpu65160c | - | <built-in method update of dict object at 0x7e60bae0f140> | Hardware |
| schneider-electric | plc_simulator_for_ecostruxure_control_expert | - | <built-in method update of dict object at 0x7e60bae0c5c0> | Hardware |
| schneider-electric | plc_simulator_for_ecostruxure_process_expert | - | <built-in method update of dict object at 0x7e60bae0c940> | Hardware |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:h:schneider-electric:modicon_m340_bmxp341000:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m340_bmxp342010:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m340_bmxp342020:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m340_bmxp342030:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmeh582040:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmeh582040c:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmeh582040s:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmeh584040:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmeh584040c:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmeh584040s:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmeh586040:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmeh586040c:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmeh586040s:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep581020:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep581020h:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep582020:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep582020h:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep582040:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep582040h:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep582040s:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep583020:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep583040:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep584020:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep584040:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep584040s:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep585040:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep585040c:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep586040:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m580_bmep586040c:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_mc80_bmkc8020301:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_mc80_bmkc8020310:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_mc80_bmkc8030311:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_momentum_171cbu78090:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_momentum_171cbu98090:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_momentum_171cbu98091:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_1634m:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_2634m:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_2834m:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_454m:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_4634m:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_554m:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_5634m:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_6634m:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_quantum_140cpu65150:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_quantum_140cpu65150c:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_quantum_140cpu65160:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_quantum_140cpu65160c:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:plc_simulator_for_ecostruxure_control_expert:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:plc_simulator_for_ecostruxure_process_expert:-:*:*:*:*:*:*:* |