VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Mar 9, 2022· Updated Jun 17, 2026

CVE-2022-24323

CVE-2022-24323

Description

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a disruption of communication between the Modicon controller and the engineering software, when an attacker is able to intercept and manipulate specific Modbus response data. Affected Product: EcoStruxure Process Expert (V2021 and prior), EcoStruxure Control Expert (V15.0 SP1 and prior)

Affected products

8
  • Schneider Electric/Ecostruxure Control Expert5 versions
    cpe:2.3:a:schneider-electric:ecostruxure_control_expert:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:schneider-electric:ecostruxure_control_expert:*:*:*:*:*:*:*:*range: <15.0
    • cpe:2.3:a:schneider-electric:ecostruxure_control_expert:15.0:-:*:*:*:*:*:*
    • cpe:2.3:a:schneider-electric:ecostruxure_control_expert:15.0:sp1:*:*:*:*:*:*
    • (no CPE)range: <=V15.0 SP1
    • (no CPE)range: V15.0 SP1 and prior
  • Schneider Electric/Ecostruxure Process Expert3 versions
    cpe:2.3:a:schneider-electric:ecostruxure_process_expert:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:schneider-electric:ecostruxure_process_expert:*:*:*:*:*:*:*:*range: <=2021
    • (no CPE)range: <=V2021
    • (no CPE)range: V2021 and prior

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.