CVE-2022-0222 Privilege escalation in Modicon M340 CPUs
An attacker can cause a denial of service on Modicon M340 Ethernet communication by sending a specific SNMP request, requiring firmware upgrades.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-0222?
CVE-2022-0222 is a high-severity vulnerability in Schneider Electric Modicon M340 CPUs, published on 22 Nov 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A CWE-269: Improper Privilege Management vulnerability exists that could cause a denial of service of the Ethernet communication of the controller when sending a specific request over SNMP. Affected products: Modicon M340 CPUs(BMXP34* versions prior to V3.40), Modicon M340 X80 Ethernet Communication modules:BMXNOE0100 (H), BMXNOE0110 (H), BMXNOR0200H RTU(BMXNOE* all versions)(BMXNOR* versions prior to v1.7 IR24)
Weakness: CWE-269
Which versions are affected by CVE-2022-0222?
It affects 14 products.
Products include Schneider-Electric Modicon M340 Bmxnoe0100 Firmware, Schneider-Electric Modicon M340 Bmxnoe0110 Firmware, Schneider-Electric Modicon M340 Bmxnoe0110h Firmware, Schneider-Electric Modicon M340 Bmxnor0200h Firmware, Schneider-Electric Modicon M340 Bmxp341000 Firmware, Schneider-Electric Modicon M340 Bmxp342000 Firmware and 8 more.
How do I fix CVE-2022-0222?
No fix has been published for CVE-2022-0222 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-0222 being exploited?
There is no known exploitation of CVE-2022-0222 in the wild and no public exploit code.
Sources
Also known as GHSA-x99p-hp5r-mjx9.