Schneider-electric Opc Ua Module For M580 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Schneider-electric Opc Ua Module For M580 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2022-34759 — CVSS 7.5 (high): A CWE-787: Out-of-bounds Write vulnerability exists that could cause a denial of service of the webserver due to improper parsing of the…
• CVE-2022-34760 — CVSS 7.5 (high): A CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability exists that could cause a denial of service of the…
• CVE-2022-34761 — CVSS 7.5 (high): A CWE-476: NULL Pointer Dereference vulnerability exists that could cause a denial of service of the webserver when parsing JSON content…
• CVE-2022-34762 — CVSS 5.9 (medium): A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause unauthorized…
• CVE-2022-34763 — CVSS 5.9 (medium): A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could cause loading of unauthorized firmware images due…
• CVE-2022-34764 — CVSS 5.9 (medium): A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause denial of service…
• CVE-2022-34765 — CVSS 5.5 (medium): A CWE-73: External Control of File Name or Path vulnerability exists that could cause loading of unauthorized firmware images when…