CVE-2022-34765
Assigner: schneider
Published: 2022-07-12T00:00:00
State: PUBLISHED
affected: product: OPC UA Modicon Communication Module
vendor: Schneider Electric
versions: lessThan: V1.10
status: affected
version: BMENUA0100
versionType: custom
product: X80 advanced RTU Communication Module
vendor: Schneider Electric
versions: lessThan: BMENOR2200H*
status: affected
version: V2.01 
versionType: custom
datePublic: 2022-07-12T00:00:00
descriptions: value: A CWE-73: External Control of File Name or Path vulnerability exists that could cause loading of unauthorized firmware images when user-controlled data is written to the file path. Affected Products: X80 advanced RTU Communication Module (BMENOR2200H) (V2.01 and later), OPC UA Modicon Communication Module (BMENUA0100) (V1.10 and prior)
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 5.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
version: 3.1
problemTypes: descriptions: cweId: CWE-73
description: CWE-73 External Control of File Name or Path
type: CWE
source: discovery: UNKNOWN
x_generator: engine: Vulnogram 0.0.9