{"id":"CVE-2022-37301","aliases":["EUVD-2022-39937","GHSA-4v3w-rm54-5xg3"],"status":"published","title":"A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial...","description":"A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus TCP protocol. Affected products: Modicon M340 CPU (part numbers BMXP34*)(V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*)(V3.22 and prior), Legacy Modicon Quantum/Premium(All Versions), Modicon Momentum MDI (171CBU*)(All Versions), Modicon MC80 (BMKC80)(V1.7 and prior)","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.0077,"percentile":0.55928,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-191"],"published":"2022-11-22T00:00:00Z","modified":"2026-06-17T04:54:50Z","products":[{"vendor":"schneider electric","product":"legacy modicon quantum/premium"},{"vendor":"schneider electric","product":"modicon m340 cpu (part numbers bmxp34*)"},{"vendor":"schneider electric","product":"modicon m580 cpu (part numbers bmep* and bmeh*)"},{"vendor":"schneider electric","product":"modicon mc80 (bmkc80)"},{"vendor":"schneider electric","product":"modicon momentum mdi (171cbu*)"},{"vendor":"schneider-electric","product":"modicon_m340_bmx_p34-2010_firmware"},{"vendor":"schneider-electric","product":"modicon_m340_bmx_p34-2030_firmware"},{"vendor":"schneider-electric","product":"modicon_m580_bmeh582040_firmware"},{"vendor":"schneider-electric","product":"modicon_m580_bmeh582040c_firmware"},{"vendor":"schneider-electric","product":"modicon_m580_bmeh582040s_firmware"},{"vendor":"schneider-electric","product":"modicon_m580_bmeh584040_firmware"},{"vendor":"schneider-electric","product":"modicon_m580_bmeh584040c_firmware"},{"vendor":"schneider-electric","product":"modicon_m580_bmeh584040s_firmware"},{"vendor":"schneider-electric","product":"modicon_m580_bmeh586040_firmware"},{"vendor":"schneider-electric","product":"modicon_m580_bmeh586040c_firmware"},{"vendor":"schneider-electric","product":"modicon_m580_bmeh586040s_firmware"},{"vendor":"schneider-electric","product":"modicon_m580_bmep581020_firmware"},{"vendor":"schneider-electric","product":"modicon_m580_bmep581020h_firmware"},{"vendor":"schneider-electric","product":"modicon_m580_bmep582020_firmware"},{"vendor":"schneider-electric","product":"modicon_m580_bmep582020h_firmware"},{"vendor":"schneider-electric","product":"modicon_m580_bmep582040_firmware"},{"vendor":"schneider-electric","product":"modicon_m580_bmep582040h_firmware"},{"vendor":"schneider-electric","product":"modicon_m580_bmep582040s_firmware"},{"vendor":"schneider-electric","product":"modicon_m580_bmep583020_firmware"},{"vendor":"schneider-electric","product":"modicon_m580_bmep583040_firmware"},{"vendor":"schneider-electric","product":"modicon_m580_bmep584020_firmware"},{"vendor":"schneider-electric","product":"modicon_m580_bmep584040_firmware"},{"vendor":"schneider-electric","product":"modicon_m580_bmep584040s_firmware"},{"vendor":"schneider-electric","product":"modicon_m580_bmep585040_firmware"},{"vendor":"schneider-electric","product":"modicon_m580_bmep585040c_firmware"},{"vendor":"schneider-electric","product":"modicon_m580_bmep586040_firmware"},{"vendor":"schneider-electric","product":"modicon_m580_bmep586040c_firmware"},{"vendor":"schneider-electric","product":"modicon_mc80_bmkc8020301_firmware"},{"vendor":"schneider-electric","product":"modicon_mc80_bmkc8020310_firmware"},{"vendor":"schneider-electric","product":"modicon_mc80_bmkc8030311_firmware"},{"vendor":"schneider-electric","product":"modicon_momentum_171cbu78090_firmware"},{"vendor":"schneider-electric","product":"modicon_momentum_171cbu98090_firmware"},{"vendor":"schneider-electric","product":"modicon_momentum_171cbu98091_firmware"},{"vendor":"schneider-electric","product":"modicon_premium_tsxp57_1634m_firmware"},{"vendor":"schneider-electric","product":"modicon_premium_tsxp57_2634m_firmware"},{"vendor":"schneider-electric","product":"modicon_premium_tsxp57_2834m_firmware"},{"vendor":"schneider-electric","product":"modicon_premium_tsxp57_454m_firmware"},{"vendor":"schneider-electric","product":"modicon_premium_tsxp57_4634m_firmware"},{"vendor":"schneider-electric","product":"modicon_premium_tsxp57_554m_firmware"},{"vendor":"schneider-electric","product":"modicon_premium_tsxp57_5634m_firmware"},{"vendor":"schneider-electric","product":"modicon_premium_tsxp57_6634m_firmware"},{"vendor":"schneider-electric","product":"modicon_quantum_140cpu65150_firmware"},{"vendor":"schneider-electric","product":"modicon_quantum_140cpu65150c_firmware"},{"vendor":"schneider-electric","product":"modicon_quantum_140cpu65160_firmware"},{"vendor":"schneider-electric","product":"modicon_quantum_140cpu65160c_firmware"},{"vendor":"schneider-electric","product":"modicon_quantum_140noc78100_firmware"},{"vendor":"schneider-electric","product":"modicon_quantum_140noe77101_firmware"},{"vendor":"schneider-electric","product":"modicon_quantum_140noe77111_firmware"}],"references":[{"url":"https://www.se.com/us/en/download/document/SEVD-2022-221-02/","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-37301"},{"url":"https://github.com/advisories/GHSA-4v3w-rm54-5xg3"}],"sources":{"cve":[{"id":"CVE-2022-37301","description":"A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus TCP protocol. Affected products: Modicon M340 CPU (part numbers BMXP34*)(V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*)(V3.22 and prior), Legacy Modicon Quantum/Premium(All Versions), Modicon Momentum MDI (171CBU*)(All Versions), Modicon MC80 (BMKC80)(V1.7 and prior)","status":"published","published":"2022-11-22T00:00:00Z","modified":"2025-04-28T14:32:19.547Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-191"],"updated_at":"2026-11-02T14:34:26.977054Z"}],"euvd":[{"id":"EUVD-2022-39937","description":"A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus TCP protocol. Affected products: Modicon M340 CPU (part numbers BMXP34*)(V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*)(V3.22 and prior), Legacy Modicon Quantum/Premium(All Versions), Modicon Momentum MDI (171CBU*)(All Versions), Modicon MC80 (BMKC80)(V1.7 and prior)","status":"published","published":"2022-11-22T00:00:00Z","modified":"2025-04-28T14:32:19Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T20:52:02.061871Z"}],"ghsa":[{"id":"GHSA-4v3w-rm54-5xg3","title":"A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial...","description":"A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus TCP protocol. Affected products: Modicon M340 CPU (part numbers BMXP34*)(V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*)(V3.22 and prior), Legacy Modicon Quantum/Premium(All Versions), Modicon Momentum MDI (171CBU*)(All Versions), Modicon MC80 (BMKC80)(V1.7 and prior)\n","status":"published","published":"2022-11-22T12:30:22Z","modified":"2023-02-02T05:08:17Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-191"],"updated_at":"2026-11-02T14:52:43.044224Z"}],"nvd":[{"id":"CVE-2022-37301","description":"A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus TCP protocol. Affected products: Modicon M340 CPU (part numbers BMXP34*)(V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*)(V3.22 and prior), Legacy Modicon Quantum/Premium(All Versions), Modicon Momentum MDI (171CBU*)(All Versions), Modicon MC80 (BMKC80)(V1.7 and prior)","status":"published","published":"2022-11-22T12:15:09.927Z","modified":"2026-06-17T04:54:50.543Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-191"],"updated_at":"2026-11-02T14:07:32.395456Z"}]}}