← Database
CVE-2022-22724
HIGH
CVSS: 7.5
Published: 2022-02-04
Modified: 2026-06-17
Description
A CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of service on ports 80 (HTTP) and 502 (Modbus), when sending a large number of TCP RST or FIN packets to any open TCP port of the PLC. Affected Product: Modicon M340 CPUs: BMXP34 (All Versions)
Affected Platforms
Schneider-Electric Modicon M340 Bmxp3420102Schneider-Electric Modicon M340 Bmxp3420102 FirmwareSchneider-Electric Modicon M340 Bmxp3420302 FirmwareSchneider-Electric Modicon M340 Bmxp342030 FirmwareSchneider-Electric Modicon M340 Bmxp342000Schneider-Electric Modicon M340 Bmxp342010Schneider-Electric Modicon M340 Bmxp342000 FirmwareSchneider-Electric Modicon M340 Bmxp341000 FirmwareSchneider-Electric Modicon M340 Bmxp342030Schneider-Electric Modicon M340 Bmxp341000