CVE-2022-45788

CWE-7543 documents3 sources
Severity
9.8CRITICAL
EPSS
0.4%
top 41.07%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
9
Schneider-electric Ecostruxure Process ExpertSchneider Electric Ecostruxure Control ExpertSchneider Electric Ecostruxure Process Expert+6 more
Timeline
PublishedJan 30
Latest updateJul 6

Description

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when a malicious project file is loaded onto the controller. Affected Products: EcoStruxure Control Expert (All Versions), EcoStruxure Process Expert (All Versions), Modicon M340 CPU - part numbers BMXP34* (All Versions), Modicon M580 CPU - part numbers BMEP* and BMEH* (All Versions), Modicon M580 CPU Safety - pa…

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.6 | Impact: 5.9

Affected Packages9 packages

Patches

Patch: download.schneider-electric.com ↗Patch: download.schneider-electric.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-7q3m-cm45-5qq5: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code execution, denial of service and↗2023-07-06
▶
CVEList
CVE-2022-45788: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code execution, denial of service and↗2023-01-30
▶
CVE-2022-45788 (CRITICAL CVSS 9.8) | A CWE-754: Improper Check for Unusu | cvebase.io