CVE-2022-34762: Schneider Electric Opc Ua Module For m580 Firmware

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause unauthorized firmware image loading when unsigned images are added to the firmware image path. Affected Products: X80 advanced RTU Communication Module (BMENOR2200H) (V2.01 and later), OPC UA Modicon Communication Module (BMENUA0100) (V1.10 and prior)

Affected products

• Schneider Electric Opc Ua Module For m580 Firmware: up to and including 1.10
• Schneider Electric x80 Advanced Rtu Module Firmware: from 2.01

Published 2022-07-13. Last modified 2026-06-17.