CVE-2022-37301: Schneider Electric Modicon m340 Bmx p34-2010 Firmware

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus TCP protocol. Affected products: Modicon M340 CPU (part numbers BMXP34*)(V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*)(V3.22 and prior), Legacy Modicon Quantum/Premium(All Versions), Modicon Momentum MDI (171CBU*)(All Versions), Modicon MC80 (BMKC80)(V1.7 and prior)

Affected products

• Schneider Electric Modicon m340 Bmx p34-2010 Firmware: before 3.50 (fixed in 3.50)
• Schneider Electric Modicon m340 Bmx p34-2030 Firmware: before 3.50 (fixed in 3.50)
• Schneider Electric Modicon m580 BMEH582040 Firmware: before 4.01 (fixed in 4.01)
• Schneider Electric Modicon m580 BMEH582040C Firmware: before 4.01 (fixed in 4.01)
• Schneider Electric Modicon m580 BMEH582040S Firmware: before 4.01 (fixed in 4.01)
• Schneider Electric Modicon m580 BMEH584040 Firmware: before 4.01 (fixed in 4.01)
• Schneider Electric Modicon m580 BMEH584040C Firmware: before 4.01 (fixed in 4.01)
• Schneider Electric Modicon m580 BMEH584040S Firmware: before 4.01 (fixed in 4.01)
• Schneider Electric Modicon m580 BMEH586040 Firmware: before 4.01 (fixed in 4.01)
• Schneider Electric Modicon m580 BMEH586040C Firmware: before 4.01 (fixed in 4.01)
• Schneider Electric Modicon m580 BMEH586040S Firmware: before 4.01 (fixed in 4.01)
• Schneider Electric Modicon m580 BMEP581020 Firmware: before 4.01 (fixed in 4.01)
• Schneider Electric Modicon m580 BMEP581020H Firmware: before 4.01 (fixed in 4.01)
• Schneider Electric Modicon m580 BMEP582020 Firmware: before 4.01 (fixed in 4.01)
• Schneider Electric Modicon m580 BMEP582020H Firmware: before 4.01 (fixed in 4.01)
• Schneider Electric Modicon m580 BMEP582040 Firmware: before 4.01 (fixed in 4.01)
• Schneider Electric Modicon m580 BMEP582040H Firmware: before 4.01 (fixed in 4.01)
• Schneider Electric Modicon m580 BMEP582040S Firmware: before 4.01 (fixed in 4.01)
• Schneider Electric Modicon m580 BMEP583020 Firmware: before 4.01 (fixed in 4.01)
• Schneider Electric Modicon m580 BMEP583040 Firmware: before 4.01 (fixed in 4.01)
• Schneider Electric Modicon m580 BMEP584020 Firmware: before 4.01 (fixed in 4.01)
• Schneider Electric Modicon m580 BMEP584040 Firmware: before 4.01 (fixed in 4.01)
• Schneider Electric Modicon m580 BMEP584040S Firmware: before 4.01 (fixed in 4.01)
• Schneider Electric Modicon m580 BMEP585040 Firmware: before 4.01 (fixed in 4.01)
• Schneider Electric Modicon m580 BMEP585040C Firmware: before 4.01 (fixed in 4.01)
• and 23 more

Published 2022-11-22. Last modified 2026-06-17.