Description
A CWE-73: External Control of File Name or Path vulnerability exists that could cause loading of unauthorized firmware images when user-controlled data is written to the file path. Affected Products: X80 advanced RTU Communication Module (BMENOR2200H) (V2.01 and later), OPC UA Modicon Communication Module (BMENUA0100) (V1.10 and prior)
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | OPC UA Modicon Communication Module | BMENUA0100 – < V1.10 | V1.10 |
| Schneider Electric | X80 advanced RTU Communication Module | V2.01 – < BMENOR2200H* | BMENOR2200H* |
Advisories 1
- SEVD-2022-193-01 OPC UA and X80 advanced RTU Modicon Communication Modules Schneider Electric CPCERT · Aug 19, 2022