CVE-2022-24322: Buffer Overflow
A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a disruption of communication between the Modicon controller and the engineering software when an attacker is able to intercept and manipulate specific Modbus response data. Affected Product: EcoStruxure Control Expert (V15.0 SP1 and prior)
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2022-24322.
What is the severity of CVE-2022-24322?
The severity of CVE-2022-24322 is medium with a CVSS score of 5.9.
What is the CWE ID for CVE-2022-24322?
The CWE ID for CVE-2022-24322 is CWE-119.
Which software versions are affected by CVE-2022-24322?
The Schneider-electric Ecostruxure Control Expert software versions 15.0 and 15.0-sp1 are affected by CVE-2022-24322.
How can CVE-2022-24322 be exploited?
An attacker can exploit CVE-2022-24322 by intercepting and manipulating specific Modbus response data, causing a disruption of communication between the Modicon controller and the engineering software.