VYPR
← All advisories
High severity8.1NVD Advisory· Published Jan 31, 2023· Updated Jun 17, 2026

CVE-2022-45789

CVE-2022-45789

Description

A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbus functions on the controller when hijacking an authenticated Modbus session. Affected Products: EcoStruxure Control Expert (All Versions), EcoStruxure Process Expert (All Versions), Modicon M340 CPU - part numbers BMXP34* (All Versions), Modicon M580 CPU - part numbers BMEP* and BMEH* (All Versions), Modicon M580 CPU Safety - part numbers BMEP58*S and BMEH58*S (All Versions)

Affected products

47
  • Schneider Electric/Ecostruxure Control Expert3 versions
    cpe:2.3:a:schneider-electric:ecostruxure_control_expert:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:schneider-electric:ecostruxure_control_expert:*:*:*:*:*:*:*:*
    • (no CPE)range: All Versions
    • (no CPE)range: All Versions
  • Schneider Electric/Ecostruxure Process Expert3 versions
    cpe:2.3:a:schneider-electric:ecostruxure_process_expert:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:schneider-electric:ecostruxure_process_expert:*:*:*:*:*:*:*:*range: <=2020
    • (no CPE)range: All Versions
    • (no CPE)range: All Versions
  • Schneider Electric/Modicon M340 Bmxp3420302h Firmware2 versions
    cpe:2.3:o:schneider-electric:modicon_m340_bmxp341000_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:schneider-electric:modicon_m340_bmxp341000_firmware:*:*:*:*:*:*:*:*
    • cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420302h_firmware:*:*:*:*:*:*:*:*
  • Schneider Electric/Modicon M340 Bmxp3420302 Firmware3 versions
    cpe:2.3:o:schneider-electric:modicon_m340_bmxp342000_firmware:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:schneider-electric:modicon_m340_bmxp342000_firmware:*:*:*:*:*:*:*:*
    • cpe:2.3:o:schneider-electric:modicon_m340_bmxp342020h_firmware:*:*:*:*:*:*:*:*
    • cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420302_firmware:*:*:*:*:*:*:*:*
  • Schneider Electric/Modicon M340 Bmxp3420102 Firmware
    cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420102_firmware:*:*:*:*:*:*:*:*
  • Schneider Electric/Modicon BMXNOC0401
    cpe:2.3:o:schneider-electric:modicon_m340_bmxp342010_firmware:-:*:*:*:*:*:*:*
  • Schneider Electric/Modicon M340 Bmxp342020 Firmware
    cpe:2.3:o:schneider-electric:modicon_m340_bmxp342020_firmware:*:*:*:*:*:*:*:*
  • Schneider Electric/Modicon M340 Bmxp342030 Firmware
    cpe:2.3:o:schneider-electric:modicon_m340_bmxp342030_firmware:*:*:*:*:*:*:*:*
  • Schneider Electric/Modicon M340 Bmxp342030h Firmware
    cpe:2.3:o:schneider-electric:modicon_m340_bmxp342030h_firmware:*:*:*:*:*:*:*:*
  • Schneider Electric/Modicon M580 Bmep586040c11 versions
    cpe:2.3:o:schneider-electric:modicon_m580_bmeh582040_firmware:*:*:*:*:*:*:*:*+ 10 more
    • cpe:2.3:o:schneider-electric:modicon_m580_bmeh582040_firmware:*:*:*:*:*:*:*:*
    • cpe:2.3:o:schneider-electric:modicon_m580_bmeh582040c_firmware:*:*:*:*:*:*:*:*
    • cpe:2.3:o:schneider-electric:modicon_m580_bmeh582040s_firmware:*:*:*:*:*:*:*:*
    • cpe:2.3:o:schneider-electric:modicon_m580_bmeh584040_firmware:*:*:*:*:*:*:*:*
    • cpe:2.3:o:schneider-electric:modicon_m580_bmeh584040c_firmware:*:*:*:*:*:*:*:*
    • cpe:2.3:o:schneider-electric:modicon_m580_bmeh584040s_firmware:*:*:*:*:*:*:*:*
    • cpe:2.3:o:schneider-electric:modicon_m580_bmeh586040_firmware:*:*:*:*:*:*:*:*
    • cpe:2.3:o:schneider-electric:modicon_m580_bmeh586040c_firmware:*:*:*:*:*:*:*:*
    • cpe:2.3:o:schneider-electric:modicon_m580_bmeh586040s_firmware:*:*:*:*:*:*:*:*
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep582040s_firmware:*:*:*:*:*:*:*:*
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep586040c_firmware:*:*:*:*:*:*:*:*
  • Schneider Electric/Modicon M580 Bmep582040h Firmware4 versions
    cpe:2.3:o:schneider-electric:modicon_m580_bmep581020_firmware:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep581020_firmware:*:*:*:*:*:*:*:*
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep581020h_firmware:*:*:*:*:*:*:*:*
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep582040_firmware:*:*:*:*:*:*:*:*
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep582040h_firmware:*:*:*:*:*:*:*:*
  • Schneider Electric/Modicon M580 Firmware7 versions
    cpe:2.3:o:schneider-electric:modicon_m580_bmep582020_firmware:*:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep582020_firmware:*:*:*:*:*:*:*:*
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep583020_firmware:*:*:*:*:*:*:*:*
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep583040_firmware:*:*:*:*:*:*:*:*
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep584020_firmware:*:*:*:*:*:*:*:*
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep584040_firmware:*:*:*:*:*:*:*:*
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep584040s_firmware:*:*:*:*:*:*:*:*
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep586040_firmware:*:*:*:*:*:*:*:*
  • Schneider Electric/Modicon M580 Bmep582040s
    cpe:2.3:o:schneider-electric:modicon_m580_bmep582020h_firmware:*:*:*:*:*:*:*:*
  • Schneider Electric/Modicon M580 Bmep585040c Firmware2 versions
    cpe:2.3:o:schneider-electric:modicon_m580_bmep585040_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep585040_firmware:*:*:*:*:*:*:*:*
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep585040c_firmware:*:*:*:*:*:*:*:*
  • Schneider Electric/Modicon M580 CPU Safetyllm-create
    Range: All Versions
  • Schneider Electric/Modicon M580 CPUllm-fuzzy
    Range: All Versions
  • Schneider Electric/Modicon M340llm-fuzzy
    Range: All Versions
  • Schneider Electric/Modicon M340 CPU (part numbers BMXP34*)v5
    Range: All Versions
  • Schneider Electric/Modicon M580 CPU (part numbers BMEP* and BMEH*)v5
    Range: All Versions
  • Schneider Electric/Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S)v5
    Range: All Versions

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.