Approved changes feed: RSS · Atom

cpe:2.3:a:schneider_electric:modicon_m580_cpu_(part_numbers_bmep*_and_bmeh*):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSchneider Electric (90ae6a25-22b7-5d12-ba01-612e2f9226a5)
ProductModicon M580 Cpu (Part Numbers Bmep* And Bmeh*) (04f81d18-c5a0-5dce-bbac-540e88419c83)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-25620 vulnerable 2026-06-08 05:56:09.544034 db.gcve.eu details are currently unavailable. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25619 vulnerable 2026-06-08 05:56:09.528006 Details available
HIGH (7.5)
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when communicating over the Modbus TCP protocol.
Published: 2023-04-19T07:53:15.405Z
Updated: 2025-02-05T15:08:51.526Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45789 vulnerable 2026-06-08 05:50:36.783791 Details available
HIGH (8.1)
A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbus functions on the controller when hijacking an authenticated Modbus session. Affected Products: EcoStruxure Control Expert (All Versions), EcoStruxure Process Expert (All Versions), Modicon M340 CPU - part numbers BMXP34* (All Versions), Modicon M580 CPU - part numbers BMEP* and BMEH* (All Versions), Modicon M580 CPU Safety - part numbers BMEP58*S and BMEH58*S (All Versions)
Published: 2023-01-31T00:00:00.000Z
Updated: 2026-05-29T14:09:29.675Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45788 vulnerable 2026-06-08 05:50:36.687342 Details available
HIGH (7.5)
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when a malicious project file is loaded onto the controller. Affected Products: EcoStruxure Control Expert (All Versions), EcoStruxure Process Expert (All Versions), Modicon M340 CPU - part numbers BMXP34* (All Versions), Modicon M580 CPU - part numbers BMEP* and BMEH* (All Versions), Modicon M580 CPU Safety - part numbers BMEP58*S and BMEH58*S (All Versions), Modicon Momentum Unity M1E Processor - 171CBU* (All Versions), Modicon MC80 - BMKC80 (All Versions), Legacy Modicon Quantum - 140CPU65* and Premium CPUs - TSXP57* (All Versions)
Published: 2023-01-30T00:00:00.000Z
Updated: 2026-05-29T14:08:52.615Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37301 vulnerable 2026-06-08 05:47:11.916186 Details available
HIGH (7.5)
A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus TCP protocol. Affected products: Modicon M340 CPU (part numbers BMXP34*)(V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*)(V3.22 and prior), Legacy Modicon Quantum/Premium(All Versions), Modicon Momentum MDI (171CBU*)(All Versions), Modicon MC80 (BMKC80)(V1.7 and prior)
Published: 2022-11-22T00:00:00.000Z
Updated: 2025-04-28T14:32:19.547Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22786 vulnerable 2026-06-08 05:30:01.377978 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.