CVE-2022-34765
published 2022-07-13CVE-2022-34765: A CWE-73: External Control of File Name or Path vulnerability exists that could cause loading of unauthorized firmware images when user-controlled data is…
medium5.3CVSS 3.1
AVNACLPRNUINSUCNILAN
A CWE-73: External Control of File Name or Path vulnerability exists that could cause loading of unauthorized firmware images when user-controlled data is written to the file path. Affected Products: X80 advanced RTU Communication Module (BMENOR2200H) (V2.01 and later), OPC UA Modicon Communication Module (BMENUA0100) (V1.10 and prior)
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| schneider-electric | opc_ua_module_for_m580_firmware | <= 1.10 | — |
| schneider-electric | x80_advanced_rtu_module_firmware | >= 2.01 | — |
| schneider_electric | opc_ua_modicon_communication_module | >= BMENUA0100 < V1.10 | V1.10 |
| schneider_electric | x80_advanced_rtu_communication_module | >= V2.01 < BMENOR2200H* | BMENOR2200H* |