CVE-2022-37301

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-11-22 · updated 2026-06-17
Weakness: CWE-191

Description

A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus TCP protocol. Affected products: Modicon M340 CPU (part numbers BMXP34*)(V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*)(V3.22 and prior), Legacy Modicon Quantum/Premium(All Versions), Modicon Momentum MDI (171CBU*)(All Versions), Modicon MC80 (BMKC80)(V1.7 and prior)

Affected products

Schneider-Electric Modicon M340 Bmx P34-2010 Firmware: before 3.50 — fixed in 3.50
Schneider-Electric Modicon M340 Bmx P34-2030 Firmware: before 3.50 — fixed in 3.50
Schneider-Electric Modicon M580 Bmeh582040 Firmware: before 4.01 — fixed in 4.01
Schneider-Electric Modicon M580 Bmeh582040C Firmware: before 4.01 — fixed in 4.01
Schneider-Electric Modicon M580 Bmeh582040S Firmware: before 4.01 — fixed in 4.01
Schneider-Electric Modicon M580 Bmeh584040 Firmware: before 4.01 — fixed in 4.01
Schneider-Electric Modicon M580 Bmeh584040C Firmware: before 4.01 — fixed in 4.01
Schneider-Electric Modicon M580 Bmeh584040S Firmware: before 4.01 — fixed in 4.01
Schneider-Electric Modicon M580 Bmeh586040 Firmware: before 4.01 — fixed in 4.01
Schneider-Electric Modicon M580 Bmeh586040C Firmware: before 4.01 — fixed in 4.01
Schneider-Electric Modicon M580 Bmeh586040S Firmware: before 4.01 — fixed in 4.01
Schneider-Electric Modicon M580 Bmep581020 Firmware: before 4.01 — fixed in 4.01
Schneider-Electric Modicon M580 Bmep581020H Firmware: before 4.01 — fixed in 4.01
Schneider-Electric Modicon M580 Bmep582020 Firmware: before 4.01 — fixed in 4.01
Schneider-Electric Modicon M580 Bmep582020H Firmware: before 4.01 — fixed in 4.01
Schneider-Electric Modicon M580 Bmep582040 Firmware: before 4.01 — fixed in 4.01
Schneider-Electric Modicon M580 Bmep582040H Firmware: before 4.01 — fixed in 4.01
Schneider-Electric Modicon M580 Bmep582040S Firmware: before 4.01 — fixed in 4.01
Schneider-Electric Modicon M580 Bmep583020 Firmware: before 4.01 — fixed in 4.01
Schneider-Electric Modicon M580 Bmep583040 Firmware: before 4.01 — fixed in 4.01
Schneider-Electric Modicon M580 Bmep584020 Firmware: before 4.01 — fixed in 4.01
Schneider-Electric Modicon M580 Bmep584040 Firmware: before 4.01 — fixed in 4.01
Schneider-Electric Modicon M580 Bmep584040S Firmware: before 4.01 — fixed in 4.01
Schneider-Electric Modicon M580 Bmep585040 Firmware: before 4.01 — fixed in 4.01
Schneider-Electric Modicon M580 Bmep585040C Firmware: before 4.01 — fixed in 4.01
Schneider-Electric Modicon M580 Bmep586040 Firmware: before 4.01 — fixed in 4.01
Schneider-Electric Modicon M580 Bmep586040C Firmware: before 4.01 — fixed in 4.01
Schneider-Electric Modicon Mc80 Bmkc8020301 Firmware: before 1.8 — fixed in 1.8
Schneider-Electric Modicon Mc80 Bmkc8020310 Firmware: before 1.8 — fixed in 1.8
Schneider-Electric Modicon Mc80 Bmkc8030311 Firmware: before 1.8 — fixed in 1.8

How to fix

Upgrade to a fixed version: Schneider-Electric Modicon M340 Bmx P34-2010 Firmware 3.50; Schneider-Electric Modicon M340 Bmx P34-2030 Firmware 3.50; Schneider-Electric Modicon M580 Bmeh582040 Firmware 4.01; Schneider-Electric Modicon M580 Bmeh582040C Firmware 4.01; Schneider-Electric Modicon M580 Bmeh582040S Firmware 4.01; Schneider-Electric Modicon M580 Bmeh584040 Firmware 4.01; Schneider-Electric Modicon M580 Bmeh584040C Firmware 4.01; Schneider-Electric Modicon M580 Bmeh584040S Firmware 4.01; Schneider-Electric Modicon M580 Bmeh586040 Firmware 4.01; Schneider-Electric Modicon M580 Bmeh586040C Firmware 4.01; Schneider-Electric Modicon M580 Bmeh586040S Firmware 4.01; Schneider-Electric Modicon M580 Bmep581020 Firmware 4.01. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-37301 or the next vulnerability affects your stack