CVE-2021-22791

mediumpriority · track · 26EPSS 0.009 · 58 %ileEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.85% (58th) EPSS

CVSS 4 · medium

Is it mine?

59 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · nvd

EPSS · scored 2026-10-27

A CWE-787: Out-of-bounds Write vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU (part numbers BMEP* and BMEH*, all versions), Modicon M340 CPU (part numbers BMXP34*, all versions), Modicon MC80 (part numbers BMKC80*, all versions), Modicon Momentum Ethernet CPU (part numbers 171CBU*, all versions), PLC Simulator for EcoStruxureª Control Expert, including all Unity Pro versions (former name of EcoStruxureª Control Expert, all versions), PLC Simulator for EcoStruxureª Process Expert including all HDCS versions (former name of EcoStruxureª Process Expert, all versions), Modicon Quantum CPU (part numbers 140CPU*, all versions), Modicon Premium CPU (part numbers TSXP5*, all versions).

cvss

Technical severity, 0–10. One row per scoring source.

6.5

010

base score 0–10 · higher = more severe · hover a vector to decode

v2.04mediumAV:N/AC:L/Au:S/C:N/I:N/A:Pprimary · NVD / NIST USexploitability 8 · impact 2.9

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USexploitability 2.8 · impact 3.6

v3.16.5mediumAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Hsecondary · ENISA EU

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Hsecondaryexploitability 2.8 · impact 3.6

v3.16mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-787USCWE-787US

affected products (59)

Products and version ranges known to be affected.

n/a Modicon M580 CPU (part numbers BMEP* and BMEH*, all versions), Modicon M340 CPU (part numbers BMXP34*, all versions), Modicon MC80 (part numbers BMKC80*, all versions), Modicon Momentum Ethernet CPU (part numbers 171CBU*, all versions), PLC Simulator for EcoStruxureª Control Expert, including all Unity Pro versions (former name of EcoStruxureª Control Expert, all versions), PLC Simulator for EcoStruxureª Process Expert including all HDCS versions (former name of EcoStruxureª Process Expert, all versions), Modicon Quantum CPU (part numbers 140CPU*, all versions), Modicon Premium CPU (part numbers TSXP5*, all versions)≤ Modicon M580 CPU (part numbers BMEP* and BMEH*, all versions), Modicon M340 CPU (part numbers BMXP34*, all versions), Modicon MC80 (part numbers BMKC80*, all versions), Modicon Momentum Ethernet CPU (part numbers 171CBU*, all versions), PLC Simulator for EcoStruxureª Control Expert, including all Unity Pro versions (former name of EcoStruxureª Control Expert, all versions), PLC Simulator for EcoStruxureª Process Expert including all HDCS versions (former name of EcoStruxureª Process Expert, all versions), Modicon Quantum CPU (part numbers 140CPU*, all versions), Modicon Premium CPU (part numbers TSXP5*, all versions)enisa_euvdEU
Schneider Electric EcoStruxur Process Expertall versionsfstec_bduRU
Schneider Electric EcoStruxure Control Expertall versionsfstec_bduRU
Schneider Electric Legacy Modicon Premiumall versionsfstec_bduRU
Schneider Electric Legacy Modicon Quantumall versionsfstec_bduRU
Schneider Electric Modicon M340 CPU BMXP34≤ 3.50fstec_bduRU
Schneider Electric Modicon M580 CPU BMEH≤ 4.10fstec_bduRU
Schneider Electric Modicon M580 CPU BMEP≤ 4.10fstec_bduRU
Schneider Electric Modicon M580 CPU Safety BMEH58all versionsfstec_bduRU
Schneider Electric Modicon M580 CPU Safety BMEP58all versionsfstec_bduRU
schneider-electric modicon m340 bmxp341000all versionsnvdUScpe:2.3:h:schneider-electric:modicon_m340_bmxp341000:*:*:*:*:*:*:*:*
schneider-electric modicon m340 bmxp342010all versionsnvdUScpe:2.3:h:schneider-electric:modicon_m340_bmxp342010:*:*:*:*:*:*:*:*
schneider-electric modicon m340 bmxp342020all versionsnvdUScpe:2.3:h:schneider-electric:modicon_m340_bmxp342020:*:*:*:*:*:*:*:*
schneider-electric modicon m340 bmxp342030all versionsnvdUScpe:2.3:h:schneider-electric:modicon_m340_bmxp342030:*:*:*:*:*:*:*:*
schneider-electric modicon m580 bmeh582040all versionsnvdUScpe:2.3:h:schneider-electric:modicon_m580_bmeh582040:*:*:*:*:*:*:*:*
schneider-electric modicon m580 bmeh582040call versionsnvdUScpe:2.3:h:schneider-electric:modicon_m580_bmeh582040c:*:*:*:*:*:*:*:*
schneider-electric modicon m580 bmeh582040sall versionsnvdUScpe:2.3:h:schneider-electric:modicon_m580_bmeh582040s:*:*:*:*:*:*:*:*
schneider-electric modicon m580 bmeh584040all versionsnvdUScpe:2.3:h:schneider-electric:modicon_m580_bmeh584040:*:*:*:*:*:*:*:*
schneider-electric modicon m580 bmeh584040call versionsnvdUScpe:2.3:h:schneider-electric:modicon_m580_bmeh584040c:*:*:*:*:*:*:*:*
schneider-electric modicon m580 bmeh584040sall versionsnvdUScpe:2.3:h:schneider-electric:modicon_m580_bmeh584040s:*:*:*:*:*:*:*:*

showing 20 of 59

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu nvd NVD CVE.org MITRE

published 2021-09-02modified 2026-06-17

references (5)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan