CVE-2022-37300
Last modified
CVE-2022-37300 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists that could cause unauthorized access in read and write mode to the controller when communicating over Modbus. Affected Products: EcoStruxure Control Expert Including all Unity Pro versions (former name of EcoStruxure Control Expert) (V15.0 SP1 and prior), EcoStruxure Process Expert, Including all versions of EcoStruxure Hybrid DCS (former name of EcoStruxure Process Expert) (V2021 and prior), Modicon M340 CPU (part numbers BMXP34*) (V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*) (V3.20 and prior).. EPSS estimates a 0.66% chance of exploitation in the next 30 days.
Description
A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists that could cause unauthorized access in read and write mode to the controller when communicating over Modbus. Affected Products: EcoStruxure Control Expert Including all Unity Pro versions (former name of EcoStruxure Control Expert) (V15.0 SP1 and prior), EcoStruxure Process Expert, Including all versions of EcoStruxure Hybrid DCS (former name of EcoStruxure Process Expert) (V2021 and prior), Modicon M340 CPU (part numbers BMXP34*) (V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*) (V3.20 and prior).
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Schneider-Electric | Ecostruxure Control Expert | < 15.1 |
| Schneider-Electric | Ecostruxure Process Expert | <= 2021 |
| Schneider-Electric | Modicon M340 Bmxp341000 Firmware | < 3.50 |
| Schneider-Electric | Modicon M340 Bmxp342000 Firmware | < 3.50 |
| Schneider-Electric | Modicon M340 Bmxp342010 Firmware | < 3.50 |
| Schneider-Electric | Modicon M340 Bmxp3420102 Firmware | < 3.50 |
| Schneider-Electric | Modicon M340 Bmxp342020 Firmware | < 3.50 |
| Schneider-Electric | Modicon M340 Bmxp342020h Firmware | < 3.50 |
| Schneider-Electric | Modicon M340 Bmxp342030 Firmware | < 3.50 |
| Schneider-Electric | Modicon M340 Bmxp3420302 Firmware | < 3.50 |
| Schneider-Electric | Modicon M340 Bmxp3420302h Firmware | < 3.50 |
| Schneider-Electric | Modicon M340 Bmxp342030h Firmware | < 3.50 |
| Schneider-Electric | Modicon M580 Bmeh582040 Firmware | < 4.02 |
| Schneider-Electric | Modicon M580 Bmeh582040c Firmware | < 4.02 |
| Schneider-Electric | Modicon M580 Bmeh582040s Firmware | < 4.02 |
| Schneider-Electric | Modicon M580 Bmeh584040 Firmware | < 4.02 |
| Schneider-Electric | Modicon M580 Bmeh584040c Firmware | < 4.02 |
| Schneider-Electric | Modicon M580 Bmeh584040s Firmware | < 4.02 |
| Schneider-Electric | Modicon M580 Bmeh586040 Firmware | < 4.02 |
| Schneider-Electric | Modicon M580 Bmeh586040c Firmware | < 4.02 |
| Schneider-Electric | Modicon M580 Bmeh586040s Firmware | < 4.02 |
| Schneider-Electric | Modicon M580 Bmep581020 Firmware | < 4.02 |
| Schneider-Electric | Modicon M580 Bmep581020h Firmware | < 4.02 |
| Schneider-Electric | Modicon M580 Bmep582020 Firmware | < 4.02 |
| Schneider-Electric | Modicon M580 Bmep582020h Firmware | < 4.02 |
| Schneider-Electric | Modicon M580 Bmep582040 Firmware | < 4.02 |
| Schneider-Electric | Modicon M580 Bmep582040h Firmware | < 4.02 |
| Schneider-Electric | Modicon M580 Bmep583020 Firmware | < 4.02 |
| Schneider-Electric | Modicon M580 Bmep583040 Firmware | < 4.02 |
| Schneider-Electric | Modicon M580 Bmep584020 Firmware | < 4.02 |
| Schneider-Electric | Modicon M580 Bmep584040 Firmware | < 4.02 |
| Schneider-Electric | Modicon M580 Bmep584040s Firmware | < 4.02 |
| Schneider-Electric | Modicon M580 Bmep585040 Firmware | < 4.02 |
| Schneider-Electric | Modicon M580 Bmep585040c Firmware | < 4.02 |
| Schneider-Electric | Modicon M580 Bmep586040 Firmware | < 4.02 |
| Schneider-Electric | Modicon M580 Bmep586040c Firmware | < 4.02 |
References
- https://www.se.com/us/en/download/document/SEVD-2022-221-01/Patch, Vendor Advisory
- https://www.se.com/us/en/download/document/SEVD-2022-221-01/Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-37300?
How severe is CVE-2022-37300?
How do I fix CVE-2022-37300?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-3729A vulnerability, which was classified as critical, has been …9.8
- CVE-2022-37290GNOME Nautilus 42.2 allows a NULL pointer dereference and ge…5.5
- CVE-2022-37292Tenda AX12 V22.03.01.21_CN is vulnerable to Buffer Overflow.…5.5
- CVE-2022-37298Shinken Solutions Shinken Monitoring Version 2.4.3 affected …9.8
- CVE-2022-37299An issue was discovered in Shirne CMS 1.2.0. There is a Path…6.5
- CVE-2022-3730A vulnerability, which was classified as critical, was found…9.8
- CVE-2022-37301A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerabil…7.5
- CVE-2022-37302A CWE-119: Improper Restriction of Operations within the Bou…5.5
- CVE-2022-37303Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2022-37304Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2022-37305The Remote Keyless Entry (RKE) receiving unit on certain Hon…6.4
- CVE-2022-37306OX App Suite before 7.10.6-rev30 allows XSS via an upsell tr…6.1
Are you affected by CVE-2022-37300?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST