A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus TCP protocol. Affected products: Modicon M340 CPU (part numbers BMXP34*)(V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*)(V3.22 and prior), Legacy Modicon Quantum/Premium(All Versions), Modicon Momentum MDI (171CBU*)(All Versions), Modicon MC80 (BMKC80)(V1.7 and prior)
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Modicon M340 CPU (part numbers BMXP34*)
Vendor
Schneider Electric
Product
Modicon M340 CPU (part numbers BMXP34*)
Platforms
Unknown
Default status
Unknown
Modicon M340 CPU (part numbers BMXP34*) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
V
affected
custom
Unavailable
3.40
None listed
Modicon M580 CPU (part numbers BMEP* and BMEH*)
Vendor
Schneider Electric
Product
Modicon M580 CPU (part numbers BMEP* and BMEH*)
Platforms
Unknown
Default status
Unknown
Modicon M580 CPU (part numbers BMEP* and BMEH*) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
V
affected
custom
Unavailable
3.22
None listed
Legacy Modicon Quantum/Premium
Vendor
Schneider Electric
Product
Legacy Modicon Quantum/Premium
Platforms
Unknown
Default status
Unknown
Legacy Modicon Quantum/Premium · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All Versions
affected
Unavailable
Unavailable
Unavailable
None listed
Modicon Momentum MDI (171CBU*)
Vendor
Schneider Electric
Product
Modicon Momentum MDI (171CBU*)
Platforms
Unknown
Default status
Unknown
Modicon Momentum MDI (171CBU*) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All Versions
affected
Unavailable
Unavailable
Unavailable
None listed
Modicon MC80 (BMKC80)
Vendor
Schneider Electric
Product
Modicon MC80 (BMKC80)
Platforms
Unknown
Default status
Unknown
Modicon MC80 (BMKC80) · Scoped product and version facts