VYPR
← All advisories
High severity7.5NVD Advisory· Published Feb 1, 2023· Updated Jun 17, 2026

CVE-2021-22786

CVE-2021-22786

Description

A CWE-200: Information Exposure vulnerability exists that could cause the exposure of sensitive information stored on the memory of the controller when communicating over the Modbus TCP protocol. Affected Products: Modicon M340 CPU (part numbers BMXP34*) (Versions prior to V3.30), Modicon M580 CPU (part numbers BMEP* and BMEH*) (Versions prior to SV3.20), Modicon MC80 (BMKC80) (Versions prior to V1.6), Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) (All Versions), Modicon Momentum MDI (171CBU*) (Versions prior to V2.3), Legacy Modicon Quantum (All Versions)

Affected products

53
  • Schneider Electric/Modicon M340 Bmxp3420302h Firmware2 versions
    cpe:2.3:o:schneider-electric:modicon_m340_bmxp341000_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:schneider-electric:modicon_m340_bmxp341000_firmware:*:*:*:*:*:*:*:*range: <3.40
    • cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420302h_firmware:*:*:*:*:*:*:*:*range: <3.40
  • Schneider Electric/Modicon M340 Bmxp3420302 Firmware3 versions
    cpe:2.3:o:schneider-electric:modicon_m340_bmxp342000_firmware:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:schneider-electric:modicon_m340_bmxp342000_firmware:*:*:*:*:*:*:*:*range: <3.40
    • cpe:2.3:o:schneider-electric:modicon_m340_bmxp342020h_firmware:*:*:*:*:*:*:*:*range: <3.40
    • cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420302_firmware:*:*:*:*:*:*:*:*range: <3.40
  • Schneider Electric/Modicon M340 Bmxp3420102 Firmware
    cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420102_firmware:*:*:*:*:*:*:*:*
    Range: <3.40
  • Schneider Electric/Modicon BMXNOC0401
    cpe:2.3:o:schneider-electric:modicon_m340_bmxp342010_firmware:*:*:*:*:*:*:*:*
    Range: <3.40
  • Schneider Electric/Modicon M340 Bmxp342020 Firmware
    cpe:2.3:o:schneider-electric:modicon_m340_bmxp342020_firmware:*:*:*:*:*:*:*:*
    Range: <3.40
  • Schneider Electric/Modicon M340 Bmxp342030 Firmware
    cpe:2.3:o:schneider-electric:modicon_m340_bmxp342030_firmware:*:*:*:*:*:*:*:*
    Range: <3.40
  • Schneider Electric/Modicon M340 Bmxp342030h Firmware
    cpe:2.3:o:schneider-electric:modicon_m340_bmxp342030h_firmware:*:*:*:*:*:*:*:*
    Range: <3.40
  • Schneider Electric/Modicon M580 Bmep586040c11 versions
    cpe:2.3:o:schneider-electric:modicon_m580_bmeh582040_firmware:*:*:*:*:*:*:*:*+ 10 more
    • cpe:2.3:o:schneider-electric:modicon_m580_bmeh582040_firmware:*:*:*:*:*:*:*:*range: <=3.20
    • cpe:2.3:o:schneider-electric:modicon_m580_bmeh582040c_firmware:*:*:*:*:*:*:*:*range: <=3.20
    • cpe:2.3:o:schneider-electric:modicon_m580_bmeh582040s_firmware:*:*:*:*:*:*:*:*range: <=3.20
    • cpe:2.3:o:schneider-electric:modicon_m580_bmeh584040_firmware:*:*:*:*:*:*:*:*range: <=3.20
    • cpe:2.3:o:schneider-electric:modicon_m580_bmeh584040c_firmware:*:*:*:*:*:*:*:*range: <=3.20
    • cpe:2.3:o:schneider-electric:modicon_m580_bmeh584040s_firmware:*:*:*:*:*:*:*:*range: <=3.20
    • cpe:2.3:o:schneider-electric:modicon_m580_bmeh586040_firmware:*:*:*:*:*:*:*:*range: <=3.20
    • cpe:2.3:o:schneider-electric:modicon_m580_bmeh586040c_firmware:*:*:*:*:*:*:*:*range: <=3.20
    • cpe:2.3:o:schneider-electric:modicon_m580_bmeh586040s_firmware:*:*:*:*:*:*:*:*range: <=3.20
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep582040s_firmware:*:*:*:*:*:*:*:*range: <=3.20
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep586040c_firmware:*:*:*:*:*:*:*:*range: <=3.20
  • Schneider Electric/Modicon M580 Bmep582040h Firmware4 versions
    cpe:2.3:o:schneider-electric:modicon_m580_bmep581020_firmware:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep581020_firmware:*:*:*:*:*:*:*:*range: <=3.20
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep581020h_firmware:*:*:*:*:*:*:*:*range: <=3.20
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep582040_firmware:*:*:*:*:*:*:*:*range: <=3.20
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep582040h_firmware:*:*:*:*:*:*:*:*range: <=3.20
  • Schneider Electric/Modicon M580 Firmware7 versions
    cpe:2.3:o:schneider-electric:modicon_m580_bmep582020_firmware:*:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep582020_firmware:*:*:*:*:*:*:*:*range: <=3.20
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep583020_firmware:*:*:*:*:*:*:*:*range: <=3.20
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep583040_firmware:*:*:*:*:*:*:*:*range: <=3.20
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep584020_firmware:*:*:*:*:*:*:*:*range: <=3.20
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep584040_firmware:*:*:*:*:*:*:*:*range: <=3.20
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep584040s_firmware:*:*:*:*:*:*:*:*range: <=3.20
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep586040_firmware:*:*:*:*:*:*:*:*range: <=3.20
  • Schneider Electric/Modicon M580 Bmep582040s
    cpe:2.3:o:schneider-electric:modicon_m580_bmep582020h_firmware:*:*:*:*:*:*:*:*
    Range: <=3.20
  • Schneider Electric/Modicon M580 Bmep585040c Firmware2 versions
    cpe:2.3:o:schneider-electric:modicon_m580_bmep585040_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep585040_firmware:*:*:*:*:*:*:*:*range: <=3.20
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep585040c_firmware:*:*:*:*:*:*:*:*range: <=3.20
  • Schneider Electric/Modicon Mc80 Bmkc8020301 Firmware
    cpe:2.3:o:schneider-electric:modicon_mc80_bmkc8020301_firmware:*:*:*:*:*:*:*:*
    Range: <1.70
  • Schneider Electric/Modicon Mc80 Bmkc8020310 Firmware
    cpe:2.3:o:schneider-electric:modicon_mc80_bmkc8020310_firmware:*:*:*:*:*:*:*:*
    Range: <1.70
  • Schneider Electric/Modicon Mc80 Bmkc8030311 Firmware
    cpe:2.3:o:schneider-electric:modicon_mc80_bmkc8030311_firmware:*:*:*:*:*:*:*:*
    Range: <1.70
  • Schneider Electric/Modicon Momentum 171cbu78090 Firmware
    cpe:2.3:o:schneider-electric:modicon_momentum_171cbu78090_firmware:*:*:*:*:*:*:*:*
    Range: <2.4
  • Schneider Electric/Modicon Momentum 171cbu98090 Firmware
    cpe:2.3:o:schneider-electric:modicon_momentum_171cbu98090_firmware:*:*:*:*:*:*:*:*
    Range: <2.4
  • Schneider Electric/Modicon Momentum 171cbu98091 Firmware
    cpe:2.3:o:schneider-electric:modicon_momentum_171cbu98091_firmware:*:*:*:*:*:*:*:*
    Range: <2.4
  • Schneider Electric/Modicon M580 CPUllm-fuzzy
    Range: <SV3.20
  • Schneider Electric/Modicon MC80llm-fuzzy2 versions
    <V1.6+ 1 more
    • (no CPE)range: <V1.6
    • (no CPE)range: All
  • Schneider Electric/Modicon M580 CPU Safetyllm-fuzzy
    Range: All Versions
  • Schneider Electric/Modicon Momentum MDIllm-fuzzy
    Range: <V2.3
  • Schneider Electric/Legacy Modicon Quantum/Premiumllm-fuzzy
    Range: All Versions
  • Schneider Electric/Modicon M340 CPUsllm-fuzzy
    Range: <V3.30
  • Schneider Electric/Modicon Quantum Plccpe-rescue
    Range: All Versions
  • Schneider Electric/Modicon M340 CPU (part numbers BMXP34*)v5
    Range: All
  • Schneider Electric/Modicon M580 CPU (part numbers BMEP* and BMEH*)v5
    Range: All
  • Schneider Electric/Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S)v5
    Range: All Versions
  • Schneider Electric/Modicon Momentum 171cbu98090cpe-rescue
    Range: All

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.