CVE-2022-37300

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-09-12 · updated 2026-06-17
Weakness: CWE-640

Description

A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists that could cause unauthorized access in read and write mode to the controller when communicating over Modbus. Affected Products: EcoStruxure Control Expert Including all Unity Pro versions (former name of EcoStruxure Control Expert) (V15.0 SP1 and prior), EcoStruxure Process Expert, Including all versions of EcoStruxure Hybrid DCS (former name of EcoStruxure Process Expert) (V2021 and prior), Modicon M340 CPU (part numbers BMXP34*) (V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*) (V3.20 and prior).

Affected products

Schneider Electric EcoStruxure Control Expert: before 15.1 — fixed in 15.1
Schneider Electric EcoStruxure Process Expert: through 2021
Schneider-Electric Modicon M340 Bmxp341000 Firmware: before 3.50 — fixed in 3.50
Schneider-Electric Modicon M340 Bmxp342000 Firmware: before 3.50 — fixed in 3.50
Schneider-Electric Modicon M340 Bmxp3420102 Firmware: before 3.50 — fixed in 3.50
Schneider-Electric Modicon M340 Bmxp342010 Firmware: before 3.50 — fixed in 3.50
Schneider-Electric Modicon M340 Bmxp342020 Firmware: before 3.50 — fixed in 3.50
Schneider-Electric Modicon M340 Bmxp342020H Firmware: before 3.50 — fixed in 3.50
Schneider-Electric Modicon M340 Bmxp3420302 Firmware: before 3.50 — fixed in 3.50
Schneider-Electric Modicon M340 Bmxp3420302H Firmware: before 3.50 — fixed in 3.50
Schneider-Electric Modicon M340 Bmxp342030 Firmware: before 3.50 — fixed in 3.50
Schneider-Electric Modicon M340 Bmxp342030H Firmware: before 3.50 — fixed in 3.50
Schneider-Electric Modicon M580 Bmeh582040 Firmware: before 4.02 — fixed in 4.02
Schneider-Electric Modicon M580 Bmeh582040C Firmware: before 4.02 — fixed in 4.02
Schneider-Electric Modicon M580 Bmeh582040S Firmware: before 4.02 — fixed in 4.02
Schneider-Electric Modicon M580 Bmeh584040 Firmware: before 4.02 — fixed in 4.02
Schneider-Electric Modicon M580 Bmeh584040C Firmware: before 4.02 — fixed in 4.02
Schneider-Electric Modicon M580 Bmeh584040S Firmware: before 4.02 — fixed in 4.02
Schneider-Electric Modicon M580 Bmeh586040 Firmware: before 4.02 — fixed in 4.02
Schneider-Electric Modicon M580 Bmeh586040C Firmware: before 4.02 — fixed in 4.02
Schneider-Electric Modicon M580 Bmeh586040S Firmware: before 4.02 — fixed in 4.02
Schneider-Electric Modicon M580 Bmep581020 Firmware: before 4.02 — fixed in 4.02
Schneider-Electric Modicon M580 Bmep581020H Firmware: before 4.02 — fixed in 4.02
Schneider-Electric Modicon M580 Bmep582020 Firmware: before 4.02 — fixed in 4.02
Schneider-Electric Modicon M580 Bmep582020H Firmware: before 4.02 — fixed in 4.02
Schneider-Electric Modicon M580 Bmep582040 Firmware: before 4.02 — fixed in 4.02
Schneider-Electric Modicon M580 Bmep582040H Firmware: before 4.02 — fixed in 4.02
Schneider-Electric Modicon M580 Bmep583020 Firmware: before 4.02 — fixed in 4.02
Schneider-Electric Modicon M580 Bmep583040 Firmware: before 4.02 — fixed in 4.02
Schneider-Electric Modicon M580 Bmep584020 Firmware: before 4.02 — fixed in 4.02

How to fix

Upgrade to a fixed version: Schneider Electric EcoStruxure Control Expert 15.1; Schneider-Electric Modicon M340 Bmxp341000 Firmware 3.50; Schneider-Electric Modicon M340 Bmxp342000 Firmware 3.50; Schneider-Electric Modicon M340 Bmxp3420102 Firmware 3.50; Schneider-Electric Modicon M340 Bmxp342010 Firmware 3.50; Schneider-Electric Modicon M340 Bmxp342020 Firmware 3.50; Schneider-Electric Modicon M340 Bmxp342020H Firmware 3.50; Schneider-Electric Modicon M340 Bmxp3420302 Firmware 3.50; Schneider-Electric Modicon M340 Bmxp3420302H Firmware 3.50; Schneider-Electric Modicon M340 Bmxp342030 Firmware 3.50; Schneider-Electric Modicon M340 Bmxp342030H Firmware 3.50; Schneider-Electric Modicon M580 Bmeh582040 Firmware 4.02. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-37300 or the next vulnerability affects your stack