CVE-2021-22791

mediumPriorität · verfolgen · 26EPSS 0.009 · 58. PerzentilEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.85% (58th) EPSS

CVSS 4 · medium

Is it mine?

59 products

Prüfe deine Angriffsfläche

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · nvd

EPSS · bewertet 2026-10-27

A CWE-787: Out-of-bounds Write vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU (part numbers BMEP* and BMEH*, all versions), Modicon M340 CPU (part numbers BMXP34*, all versions), Modicon MC80 (part numbers BMKC80*, all versions), Modicon Momentum Ethernet CPU (part numbers 171CBU*, all versions), PLC Simulator for EcoStruxureª Control Expert, including all Unity Pro versions (former name of EcoStruxureª Control Expert, all versions), PLC Simulator for EcoStruxureª Process Expert including all HDCS versions (former name of EcoStruxureª Process Expert, all versions), Modicon Quantum CPU (part numbers 140CPU*, all versions), Modicon Premium CPU (part numbers TSXP5*, all versions).

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

6.5

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v2.04mediumAV:N/AC:L/Au:S/C:N/I:N/A:Pprimary · NVD / NIST USAusnutzbarkeit 8 · Auswirkung 2.9

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USAusnutzbarkeit 2.8 · Auswirkung 3.6

v3.16.5mediumAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Hsecondary · ENISA EU

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HsecondaryAusnutzbarkeit 2.8 · Auswirkung 3.6

v3.16mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-787USCWE-787US

betroffene Produkte (59)

Betroffene Produkte und Versionsbereiche.

n/a Modicon M580 CPU (part numbers BMEP* and BMEH*, all versions), Modicon M340 CPU (part numbers BMXP34*, all versions), Modicon MC80 (part numbers BMKC80*, all versions), Modicon Momentum Ethernet CPU (part numbers 171CBU*, all versions), PLC Simulator for EcoStruxureª Control Expert, including all Unity Pro versions (former name of EcoStruxureª Control Expert, all versions), PLC Simulator for EcoStruxureª Process Expert including all HDCS versions (former name of EcoStruxureª Process Expert, all versions), Modicon Quantum CPU (part numbers 140CPU*, all versions), Modicon Premium CPU (part numbers TSXP5*, all versions)≤ Modicon M580 CPU (part numbers BMEP* and BMEH*, all versions), Modicon M340 CPU (part numbers BMXP34*, all versions), Modicon MC80 (part numbers BMKC80*, all versions), Modicon Momentum Ethernet CPU (part numbers 171CBU*, all versions), PLC Simulator for EcoStruxureª Control Expert, including all Unity Pro versions (former name of EcoStruxureª Control Expert, all versions), PLC Simulator for EcoStruxureª Process Expert including all HDCS versions (former name of EcoStruxureª Process Expert, all versions), Modicon Quantum CPU (part numbers 140CPU*, all versions), Modicon Premium CPU (part numbers TSXP5*, all versions)enisa_euvdEU
Schneider Electric EcoStruxur Process Expertalle Versionenfstec_bduRU
Schneider Electric EcoStruxure Control Expertalle Versionenfstec_bduRU
Schneider Electric Legacy Modicon Premiumalle Versionenfstec_bduRU
Schneider Electric Legacy Modicon Quantumalle Versionenfstec_bduRU
Schneider Electric Modicon M340 CPU BMXP34≤ 3.50fstec_bduRU
Schneider Electric Modicon M580 CPU BMEH≤ 4.10fstec_bduRU
Schneider Electric Modicon M580 CPU BMEP≤ 4.10fstec_bduRU
Schneider Electric Modicon M580 CPU Safety BMEH58alle Versionenfstec_bduRU
Schneider Electric Modicon M580 CPU Safety BMEP58alle Versionenfstec_bduRU
schneider-electric modicon m340 bmxp341000alle VersionennvdUScpe:2.3:h:schneider-electric:modicon_m340_bmxp341000:*:*:*:*:*:*:*:*
schneider-electric modicon m340 bmxp342010alle VersionennvdUScpe:2.3:h:schneider-electric:modicon_m340_bmxp342010:*:*:*:*:*:*:*:*
schneider-electric modicon m340 bmxp342020alle VersionennvdUScpe:2.3:h:schneider-electric:modicon_m340_bmxp342020:*:*:*:*:*:*:*:*
schneider-electric modicon m340 bmxp342030alle VersionennvdUScpe:2.3:h:schneider-electric:modicon_m340_bmxp342030:*:*:*:*:*:*:*:*
schneider-electric modicon m580 bmeh582040alle VersionennvdUScpe:2.3:h:schneider-electric:modicon_m580_bmeh582040:*:*:*:*:*:*:*:*
schneider-electric modicon m580 bmeh582040calle VersionennvdUScpe:2.3:h:schneider-electric:modicon_m580_bmeh582040c:*:*:*:*:*:*:*:*
schneider-electric modicon m580 bmeh582040salle VersionennvdUScpe:2.3:h:schneider-electric:modicon_m580_bmeh582040s:*:*:*:*:*:*:*:*
schneider-electric modicon m580 bmeh584040alle VersionennvdUScpe:2.3:h:schneider-electric:modicon_m580_bmeh584040:*:*:*:*:*:*:*:*
schneider-electric modicon m580 bmeh584040calle VersionennvdUScpe:2.3:h:schneider-electric:modicon_m580_bmeh584040c:*:*:*:*:*:*:*:*
schneider-electric modicon m580 bmeh584040salle VersionennvdUScpe:2.3:h:schneider-electric:modicon_m580_bmeh584040s:*:*:*:*:*:*:*:*

20 von 59 angezeigt

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu nvd NVD CVE.org MITRE

veröffentlicht 2021-09-02geändert 2026-06-17

Referenzen (5)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan