CVE-2022-34762
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause unauthorized firmware image loading when unsigned images are added to the firmware image path. Affected Products: X80 advanced RTU Communication Module (BMENOR2200H) (V2.01 and later), OPC UA Modicon Communication Module (BMENUA0100) (V1.10 and prior)
Una CWE-22: Se presenta una vulnerabilidad de Limitación Inapropiada de un Nombre de Ruta a un Directorio Restringido ("Salto de Ruta") que podría causar la carga no autorizada de imágenes de firmware cuando son añadidas imágenes sin firmar a la ruta de imágenes de firmware. Productos afectados: X80 advanced RTU Communication Module (BMENOR2200H) (versiones V2.01 y posteriores), OPC UA Modicon Communication Module (BMENUA0100) (versiones V1.10 y anteriores)
CVSS Scores
SSVC
- Decision:-
Timeline
- 2022-06-28 CVE Reserved
- 2022-07-13 CVE Published
- 2024-02-03 EPSS Updated
- 2024-09-16 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CAPEC
References (1)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Schneider-electric Search vendor "Schneider-electric" | Opc Ua Module For M580 Firmware Search vendor "Schneider-electric" for product "Opc Ua Module For M580 Firmware" | <= 1.10 Search vendor "Schneider-electric" for product "Opc Ua Module For M580 Firmware" and version " <= 1.10" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Opc Ua Module For M580 Search vendor "Schneider-electric" for product "Opc Ua Module For M580" | - | - |
Safe
|
Schneider-electric Search vendor "Schneider-electric" | X80 Advanced Rtu Module Firmware Search vendor "Schneider-electric" for product "X80 Advanced Rtu Module Firmware" | >= 2.01 Search vendor "Schneider-electric" for product "X80 Advanced Rtu Module Firmware" and version " >= 2.01" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | X80 Advanced Rtu Module Search vendor "Schneider-electric" for product "X80 Advanced Rtu Module" | - | - |
Safe
|