Description
A CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of service on ports 80 (HTTP) and 502 (Modbus), when sending a large number of TCP RST or FIN packets to any open TCP port of the PLC. Affected Product: Modicon M340 CPUs: BMXP34 (All Versions)
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Modicon M340 CPUs: BMXP34 (All Versions) | Modicon M340 CPUs: BMXP34 (All Versions) | — |
Advisories 1
- SEVD-2022-011-01 Ethernet and Web server on Modicon M340 controller and Communication Modules Schneider Electric CPCERT · Jan 11, 2022