← Database

CVE-2022-34762

MEDIUM CVSS: 5.9 Published: 2022-07-13 Modified: 2026-06-17

Description

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause unauthorized firmware image loading when unsigned images are added to the firmware image path. Affected Products: X80 advanced RTU Communication Module (BMENOR2200H) (V2.01 and later), OPC UA Modicon Communication Module (BMENUA0100) (V1.10 and prior)

Affected Platforms

Schneider-Electric Opc Ua Module For M580 FirmwareSchneider-Electric X80 Advanced Rtu ModuleSchneider-Electric X80 Advanced Rtu Module FirmwareSchneider-Electric Opc Ua Module For M580

Weakness Type

CWE-22

References