CVE-2022-37302

published 2022-09-13

CVE-2022-37302: A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a crash of the Control Expert software…

Priority P4 20 medium 5.5 CVSS 3.1

AV L AC L PR N UI R S U C N I N A H

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a crash of the Control Expert software when an incorrect project file is opened. Affected Products: EcoStruxure Control Expert(V15.1 HF001 and prior).

Affected

3 ranges

Vendor	Product	Version range	Fixed in
schneider-electric	ecostruxure_control_expert	< 15.1	15.1
schneider-electric	ecostruxure_control_expert	—	—
schneider_electric	ecostruxure_control_expert	HF001 – 15.1	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-119