What’s Vulnerable › Vulnerabilities

CVE-2022-22724

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-02-04 · updated 2026-06-17
• Weakness: CWE-400

Description

A CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of service on ports 80 (HTTP) and 502 (Modbus), when sending a large number of TCP RST or FIN packets to any open TCP port of the PLC. Affected Product: Modicon M340 CPUs: BMXP34 (All Versions)

Affected products

• Schneider-Electric Modicon M340 Bmxp341000 Firmware: all versions
• Schneider-Electric Modicon M340 Bmxp342000 Firmware: all versions
• Schneider-Electric Modicon M340 Bmxp3420102 Firmware: all versions
• Schneider-Electric Modicon M340 Bmxp342010 Firmware: all versions
• Schneider-Electric Modicon M340 Bmxp3420302 Firmware: all versions
• Schneider-Electric Modicon M340 Bmxp342030 Firmware: all versions

References

• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-011-01
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-011-01

Get alerted when CVE-2022-22724 or the next vulnerability affects your stack