CVE-2022-22724 Denial of service in Modicon M340 CPUs: BMXP34 (All Versions)
Attackers can cause denial of service on Modicon M340 PLCs by flooding TCP ports with RST or FIN packets, disrupting industrial operations.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-22724?
CVE-2022-22724 is a high-severity denial of service vulnerability in Modicon M340 CPUs: BMXP34 (All Versions), published on 4 Feb 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of service on ports 80 (HTTP) and 502 (Modbus), when sending a large number of TCP RST or FIN packets to any open TCP port of the PLC. Affected Product: Modicon M340 CPUs: BMXP34 (All Versions)
Weakness: CWE-400
Which versions are affected by CVE-2022-22724?
It affects 6 products.
Products include Schneider-Electric Modicon M340 Bmxp341000 Firmware, Schneider-Electric Modicon M340 Bmxp342000 Firmware, Schneider-Electric Modicon M340 Bmxp3420102 Firmware, Schneider-Electric Modicon M340 Bmxp342010 Firmware, Schneider-Electric Modicon M340 Bmxp3420302 Firmware, Schneider-Electric Modicon M340 Bmxp342030 Firmware.
How do I fix CVE-2022-22724?
No fix has been published for CVE-2022-22724 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2022-22724 being exploited?
There is no known exploitation of CVE-2022-22724 in the wild and no public exploit code.
Other vulnerabilities in Modicon M340 CPUs: BMXP34 (All Versions)
- CVE-2021-22786 Information disclosure in Legacy Modicon Quantum
- CVE-2020-7537 Denial of service in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions)
- CVE-2020-7543 Denial of service in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions)
Sources
Also known as GHSA-qj7j-w6m6-7fgc.