Approved changes feed: RSS · Atom

cpe:2.3:a:schneider_electric:modicon_m580_cpu_safety_(part_numbers_bmep58*s_and_bmeh58*s):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSchneider Electric (90ae6a25-22b7-5d12-ba01-612e2f9226a5)
ProductModicon M580 Cpu Safety (Part Numbers Bmep58*S And Bmeh58*S) (29ef7ce3-d526-59a1-a0b1-812f07d09650)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-11425 vulnerable 2026-06-08 06:23:49.630231 Details available
HIGH (7.5)
CWE-131: Incorrect Calculation of Buffer Size vulnerability exists that could cause Denial-of-Service of the product when an unauthenticated user is sending a crafted HTTPS packet to the webserver.
Published: 2025-01-17T09:00:32.335Z
Updated: 2025-02-12T17:09:38.349Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6408 vulnerable 2026-06-08 06:19:47.269158 Details available
HIGH (8.1)
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause a denial of service and loss of confidentiality, integrity of controllers when conducting a Man in the Middle attack.
Published: 2024-02-14T16:52:24.805Z
Updated: 2024-08-02T08:28:21.776Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25620 vulnerable 2026-06-08 05:56:09.544062 db.gcve.eu details are currently unavailable. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25619 vulnerable 2026-06-08 05:56:09.528775 Details available
HIGH (7.5)
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when communicating over the Modbus TCP protocol.
Published: 2023-04-19T07:53:15.405Z
Updated: 2025-02-05T15:08:51.526Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45789 vulnerable 2026-06-08 05:50:36.783912 Details available
HIGH (8.1)
A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbus functions on the controller when hijacking an authenticated Modbus session. Affected Products: EcoStruxure Control Expert (All Versions), EcoStruxure Process Expert (All Versions), Modicon M340 CPU - part numbers BMXP34* (All Versions), Modicon M580 CPU - part numbers BMEP* and BMEH* (All Versions), Modicon M580 CPU Safety - part numbers BMEP58*S and BMEH58*S (All Versions)
Published: 2023-01-31T00:00:00.000Z
Updated: 2026-05-29T14:09:29.675Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45788 vulnerable 2026-06-08 05:50:36.688354 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22786 vulnerable 2026-06-08 05:30:01.378733 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.