CVE-2021-22790
Severity Score
6.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
A CWE-125: Out-of-bounds Read vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU (part numbers BMEP* and BMEH*, all versions), Modicon M340 CPU (part numbers BMXP34*, all versions), Modicon MC80 (part numbers BMKC80*, all versions), Modicon Momentum Ethernet CPU (part numbers 171CBU*, all versions), PLC Simulator for EcoStruxureª Control Expert, including all Unity Pro versions (former name of EcoStruxureª Control Expert, all versions), PLC Simulator for EcoStruxureª Process Expert including all HDCS versions (former name of EcoStruxureª Process Expert, all versions), Modicon Quantum CPU (part numbers 140CPU*, all versions), Modicon Premium CPU (part numbers TSXP5*, all versions).
UN CWE-125: Una vulnerabilidad de Lectura Fuera de Límites que podría causar una Denegación de Servicio en el controlador/simulador del PLC Modicon cuando se actualiza la aplicación del controlador con un archivo de proyecto especialmente diseñado se presenta en Modicon M580 CPU (números de pieza BMEP* y BMEH*, todas las versiones), CPU Modicon M340 (números de pieza BMXP34*, todas las versiones), Modicon MC80 (números de pieza BMKC80*, todas las versiones), CPU Modicon Momentum Ethernet (números de pieza 171CBU*, todas las versiones), PLC Simulator for EcoStruxureª Control Expert, incluyendo todas las versiones Unity Pro (antiguo nombre de EcoStruxureª Control Expert, todas las versiones), PLC Simulator for EcoStruxureª Process Expert incluyendo todas las versiones HDCS (antiguo nombre de EcoStruxureª Process Expert, todas las versiones), Modicon Quantum CPU (números de pieza 140CPU*, todas las versiones), Modicon Premium CPU (números de pieza TSXP5*, todas las versiones)
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2021-01-06 CVE Reserved
- 2021-09-02 CVE Published
- 2023-03-26 EPSS Updated
- 2024-08-03 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-125: Out-of-bounds Read
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-222-05 | Not Applicable |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-222-04 | 2021-09-13 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Bmxp341000 Search vendor "Schneider-electric" for product "Modicon M340 Bmxp341000" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Bmxp342010 Search vendor "Schneider-electric" for product "Modicon M340 Bmxp342010" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Bmxp342020 Search vendor "Schneider-electric" for product "Modicon M340 Bmxp342020" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Bmxp342030 Search vendor "Schneider-electric" for product "Modicon M340 Bmxp342030" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmeh582040 Search vendor "Schneider-electric" for product "Modicon M580 Bmeh582040" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmeh582040c Search vendor "Schneider-electric" for product "Modicon M580 Bmeh582040c" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmeh582040s Search vendor "Schneider-electric" for product "Modicon M580 Bmeh582040s" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmeh584040 Search vendor "Schneider-electric" for product "Modicon M580 Bmeh584040" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmeh584040c Search vendor "Schneider-electric" for product "Modicon M580 Bmeh584040c" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmeh584040s Search vendor "Schneider-electric" for product "Modicon M580 Bmeh584040s" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmeh586040 Search vendor "Schneider-electric" for product "Modicon M580 Bmeh586040" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmeh586040c Search vendor "Schneider-electric" for product "Modicon M580 Bmeh586040c" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmeh586040s Search vendor "Schneider-electric" for product "Modicon M580 Bmeh586040s" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmep581020 Search vendor "Schneider-electric" for product "Modicon M580 Bmep581020" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmep581020h Search vendor "Schneider-electric" for product "Modicon M580 Bmep581020h" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmep582020 Search vendor "Schneider-electric" for product "Modicon M580 Bmep582020" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmep582020h Search vendor "Schneider-electric" for product "Modicon M580 Bmep582020h" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmep582040 Search vendor "Schneider-electric" for product "Modicon M580 Bmep582040" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmep582040h Search vendor "Schneider-electric" for product "Modicon M580 Bmep582040h" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmep582040s Search vendor "Schneider-electric" for product "Modicon M580 Bmep582040s" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmep583020 Search vendor "Schneider-electric" for product "Modicon M580 Bmep583020" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmep583040 Search vendor "Schneider-electric" for product "Modicon M580 Bmep583040" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmep584020 Search vendor "Schneider-electric" for product "Modicon M580 Bmep584020" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmep584040 Search vendor "Schneider-electric" for product "Modicon M580 Bmep584040" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmep584040s Search vendor "Schneider-electric" for product "Modicon M580 Bmep584040s" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmep585040 Search vendor "Schneider-electric" for product "Modicon M580 Bmep585040" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmep585040c Search vendor "Schneider-electric" for product "Modicon M580 Bmep585040c" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmep586040 Search vendor "Schneider-electric" for product "Modicon M580 Bmep586040" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmep586040c Search vendor "Schneider-electric" for product "Modicon M580 Bmep586040c" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon Mc80 Bmkc8020301 Search vendor "Schneider-electric" for product "Modicon Mc80 Bmkc8020301" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon Mc80 Bmkc8020310 Search vendor "Schneider-electric" for product "Modicon Mc80 Bmkc8020310" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon Mc80 Bmkc8030311 Search vendor "Schneider-electric" for product "Modicon Mc80 Bmkc8030311" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon Momentum 171cbu78090 Search vendor "Schneider-electric" for product "Modicon Momentum 171cbu78090" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon Momentum 171cbu98090 Search vendor "Schneider-electric" for product "Modicon Momentum 171cbu98090" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon Momentum 171cbu98091 Search vendor "Schneider-electric" for product "Modicon Momentum 171cbu98091" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon Premium Tsxp57 1634m Search vendor "Schneider-electric" for product "Modicon Premium Tsxp57 1634m" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon Premium Tsxp57 2634m Search vendor "Schneider-electric" for product "Modicon Premium Tsxp57 2634m" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon Premium Tsxp57 2834m Search vendor "Schneider-electric" for product "Modicon Premium Tsxp57 2834m" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon Premium Tsxp57 454m Search vendor "Schneider-electric" for product "Modicon Premium Tsxp57 454m" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon Premium Tsxp57 4634m Search vendor "Schneider-electric" for product "Modicon Premium Tsxp57 4634m" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon Premium Tsxp57 554m Search vendor "Schneider-electric" for product "Modicon Premium Tsxp57 554m" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon Premium Tsxp57 5634m Search vendor "Schneider-electric" for product "Modicon Premium Tsxp57 5634m" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon Premium Tsxp57 6634m Search vendor "Schneider-electric" for product "Modicon Premium Tsxp57 6634m" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon Quantum 140cpu65150 Search vendor "Schneider-electric" for product "Modicon Quantum 140cpu65150" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon Quantum 140cpu65150c Search vendor "Schneider-electric" for product "Modicon Quantum 140cpu65150c" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon Quantum 140cpu65160 Search vendor "Schneider-electric" for product "Modicon Quantum 140cpu65160" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon Quantum 140cpu65160c Search vendor "Schneider-electric" for product "Modicon Quantum 140cpu65160c" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Plc Simulator For Ecostruxure Control Expert Search vendor "Schneider-electric" for product "Plc Simulator For Ecostruxure Control Expert" | - | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Plc Simulator For Ecostruxure Process Expert Search vendor "Schneider-electric" for product "Plc Simulator For Ecostruxure Process Expert" | - | - |
Affected
| ||||||