CVE-2022-34761: Null Pointer Dereference
First published: Tue Jul 12 2022(Updated: )
A CWE-476: NULL Pointer Dereference vulnerability exists that could cause a denial of service of the webserver when parsing JSON content type. Affected Products: X80 advanced RTU Communication Module (BMENOR2200H) (V2.01 and later), OPC UA Modicon Communication Module (BMENUA0100) (V1.10 and prior)
Credit: cybersecurity@se.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Schneider-electric Opc Ua Module For M580 Firmware | <=1.10 | |
| Schneider-electric Opc Ua Module For M580 | ||
| Schneider-electric X80 Advanced Rtu Module Firmware | >=2.01 | |
| Schneider-electric X80 Advanced Rtu Module |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2022-34761?
CVE-2022-34761 has a severity rating that can lead to a denial of service on the affected webserver.
How do I fix CVE-2022-34761?
To address CVE-2022-34761, it is recommended to update the firmware of the affected Schneider Electric devices to the latest secure versions.
Which products are affected by CVE-2022-34761?
CVE-2022-34761 affects the X80 advanced RTU Communication Module with firmware version 2.01 and later, and the OPC UA Modicon Communication Module with firmware version 1.10 and prior.
What types of attacks can exploit CVE-2022-34761?
CVE-2022-34761 can be exploited to perform denial of service attacks by sending malicious JSON content to the affected webserver.
What is a NULL Pointer Dereference vulnerability like CVE-2022-34761?
A NULL Pointer Dereference vulnerability, such as CVE-2022-34761, occurs when a program attempts to access an object or variable that is not initialized, which can lead to crashes or unexpected behavior.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/references
- agent/author
- agent/remedy
- agent/tags
- agent/event
- agent/first-publish-date
- agent/description
- agent/source
- vendor/schneider-electric
- canonical/schneider-electric opc ua module for m580 firmware
- version/schneider-electric opc ua module for m580 firmware/1.10
- canonical/schneider-electric opc ua module for m580
- canonical/schneider-electric x80 advanced rtu module firmware
- version/schneider-electric x80 advanced rtu module firmware/2.01
- canonical/schneider-electric x80 advanced rtu module