PT-2022-3628 · Unknown · Opc Ua Modicon Communication Module+1
Published
2022-07-12
·
Updated
2022-07-27
·
CVE-2022-34761
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
X80 advanced RTU Communication Module versions 2.01 and later
OPC UA Modicon Communication Module versions 1.10 and prior
Description
A NULL Pointer Dereference vulnerability exists that could cause a denial of service of the webserver when parsing JSON content type. The vulnerability is related to errors in handling JSON content. Exploitation of the vulnerability could allow a remote attacker to cause a denial of service.
Recommendations
For X80 advanced RTU Communication Module versions 2.01 and later, consider disabling JSON content type parsing until a patch is available.
For OPC UA Modicon Communication Module versions 1.10 and prior, restrict access to the webserver to minimize the risk of exploitation.
As a temporary workaround, consider avoiding the use of JSON content type in the affected modules until the issue is resolved.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Opc Ua Modicon Communication Module
X80 Advanced Rtu Communication Module