CVE-2022-24323
Assigner: schneider
Published: 2022-03-09T23:05:14
State: PUBLISHED
affected: product: EcoStruxure Process Expert
vendor: Schneider Electric
versions: status: affected
version: V2021 and prior
product: EcoStruxure Control Expert
vendor: Schneider Electric
versions: status: affected
version: V15.0 SP1 and prior
descriptions: value: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a disruption of communication between the Modicon controller and the engineering software, when an attacker is able to intercept and manipulate specific Modbus response data. Affected Product: EcoStruxure Process Expert (V2021 and prior), EcoStruxure Control Expert (V15.0 SP1 and prior)
metrics: cvssV3_1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
version: 3.1
problemTypes: descriptions: cweId: CWE-754
description: CWE-754 Improper Check for Unusual or Exceptional Conditions
type: CWE
source: discovery: UNKNOWN
x_generator: engine: Vulnogram 0.0.9