Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2021-22792 Details

Description

A CWE-476: NULL Pointer Dereference vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU (part numbers BMEP* and BMEH*, all versions), Modicon M340 CPU (part numbers BMXP34*, all versions), Modicon MC80 (part numbers BMKC80*, all versions), Modicon Momentum Ethernet CPU (part numbers 171CBU*, all versions), PLC Simulator for EcoStruxureª Control Expert, including all Unity Pro versions (former name of EcoStruxureª Control Expert, all versions), PLC Simulator for EcoStruxureª Process Expert including all HDCS versions (former name of EcoStruxureª Process Expert, all versions), Modicon Quantum CPU (part numbers 140CPU*, all versions), Modicon Premium CPU (part numbers TSXP5*, all versions).

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.5 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CNA: CISA-ADPCVSS-B:6.5 MEDIUMVector:CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-222-07	CVE	Not Applicable
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-222-07	[email protected]	Not Applicable
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-222-04	[email protected]	PatchVendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-476	NULL Pointer Dereference	[email protected]

Affected Products

Product	Versions
schneider-electric modicon m340 bmxp341000	All versions
CPE cpe:2.3:h:schneider-electric:modicon_m340_bmxp341000:-:::::::* Remediation No remediation found in references.
schneider-electric modicon m340 bmxp342010	All versions
CPE cpe:2.3:h:schneider-electric:modicon_m340_bmxp342010:-:::::::* Remediation No remediation found in references.
schneider-electric modicon m340 bmxp342020	All versions
CPE cpe:2.3:h:schneider-electric:modicon_m340_bmxp342020:-:::::::* Remediation No remediation found in references.
schneider-electric modicon m340 bmxp342030	All versions
CPE cpe:2.3:h:schneider-electric:modicon_m340_bmxp342030:-:::::::* Remediation No remediation found in references.
schneider-electric modicon m580 bmeh582040	All versions
CPE cpe:2.3:h:schneider-electric:modicon_m580_bmeh582040:-:::::::* Remediation No remediation found in references.
schneider-electric modicon m580 bmeh582040c	All versions
CPE cpe:2.3:h:schneider-electric:modicon_m580_bmeh582040c:-:::::::* Remediation No remediation found in references.
schneider-electric modicon m580 bmeh582040s	All versions
CPE cpe:2.3:h:schneider-electric:modicon_m580_bmeh582040s:-:::::::* Remediation No remediation found in references.
schneider-electric modicon m580 bmeh584040	All versions
CPE cpe:2.3:h:schneider-electric:modicon_m580_bmeh584040:-:::::::* Remediation No remediation found in references.
schneider-electric modicon m580 bmeh584040c	All versions
CPE cpe:2.3:h:schneider-electric:modicon_m580_bmeh584040c:-:::::::* Remediation No remediation found in references.
schneider-electric modicon m580 bmeh584040s	All versions
CPE cpe:2.3:h:schneider-electric:modicon_m580_bmeh584040s:-:::::::* Remediation No remediation found in references.
schneider-electric modicon m580 bmeh586040	All versions
CPE cpe:2.3:h:schneider-electric:modicon_m580_bmeh586040:-:::::::* Remediation No remediation found in references.
schneider-electric modicon m580 bmeh586040c	All versions
CPE cpe:2.3:h:schneider-electric:modicon_m580_bmeh586040c:-:::::::* Remediation No remediation found in references.
schneider-electric modicon m580 bmeh586040s	All versions
CPE cpe:2.3:h:schneider-electric:modicon_m580_bmeh586040s:-:::::::* Remediation No remediation found in references.
schneider-electric modicon m580 bmep581020	All versions
CPE cpe:2.3:h:schneider-electric:modicon_m580_bmep581020:-:::::::* Remediation No remediation found in references.
schneider-electric modicon m580 bmep581020h	All versions
CPE cpe:2.3:h:schneider-electric:modicon_m580_bmep581020h:-:::::::* Remediation No remediation found in references.
schneider-electric modicon m580 bmep582020	All versions
CPE cpe:2.3:h:schneider-electric:modicon_m580_bmep582020:-:::::::* Remediation No remediation found in references.
schneider-electric modicon m580 bmep582020h	All versions
CPE cpe:2.3:h:schneider-electric:modicon_m580_bmep582020h:-:::::::* Remediation No remediation found in references.
schneider-electric modicon m580 bmep582040	All versions
CPE cpe:2.3:h:schneider-electric:modicon_m580_bmep582040:-:::::::* Remediation No remediation found in references.
schneider-electric modicon m580 bmep582040h	All versions
CPE cpe:2.3:h:schneider-electric:modicon_m580_bmep582040h:-:::::::* Remediation No remediation found in references.
schneider-electric modicon m580 bmep582040s	All versions
CPE cpe:2.3:h:schneider-electric:modicon_m580_bmep582040s:-:::::::* Remediation No remediation found in references.
schneider-electric modicon m580 bmep583020	All versions
CPE cpe:2.3:h:schneider-electric:modicon_m580_bmep583020:-:::::::* Remediation No remediation found in references.
schneider-electric modicon m580 bmep583040	All versions
CPE cpe:2.3:h:schneider-electric:modicon_m580_bmep583040:-:::::::* Remediation No remediation found in references.
schneider-electric modicon m580 bmep584020	All versions
CPE cpe:2.3:h:schneider-electric:modicon_m580_bmep584020:-:::::::* Remediation No remediation found in references.
schneider-electric modicon m580 bmep584040	All versions
CPE cpe:2.3:h:schneider-electric:modicon_m580_bmep584040:-:::::::* Remediation No remediation found in references.
schneider-electric modicon m580 bmep584040s	All versions
CPE cpe:2.3:h:schneider-electric:modicon_m580_bmep584040s:-:::::::* Remediation No remediation found in references.
schneider-electric modicon m580 bmep585040	All versions
CPE cpe:2.3:h:schneider-electric:modicon_m580_bmep585040:-:::::::* Remediation No remediation found in references.
schneider-electric modicon m580 bmep585040c	All versions
CPE cpe:2.3:h:schneider-electric:modicon_m580_bmep585040c:-:::::::* Remediation No remediation found in references.
schneider-electric modicon m580 bmep586040	All versions
CPE cpe:2.3:h:schneider-electric:modicon_m580_bmep586040:-:::::::* Remediation No remediation found in references.
schneider-electric modicon m580 bmep586040c	All versions
CPE cpe:2.3:h:schneider-electric:modicon_m580_bmep586040c:-:::::::* Remediation No remediation found in references.
schneider-electric modicon mc80 bmkc8020301	All versions
CPE cpe:2.3:h:schneider-electric:modicon_mc80_bmkc8020301:-:::::::* Remediation No remediation found in references.
schneider-electric modicon mc80 bmkc8020310	All versions
CPE cpe:2.3:h:schneider-electric:modicon_mc80_bmkc8020310:-:::::::* Remediation No remediation found in references.
schneider-electric modicon mc80 bmkc8030311	All versions
CPE cpe:2.3:h:schneider-electric:modicon_mc80_bmkc8030311:-:::::::* Remediation No remediation found in references.
schneider-electric modicon momentum 171cbu78090	All versions
CPE cpe:2.3:h:schneider-electric:modicon_momentum_171cbu78090:-:::::::* Remediation No remediation found in references.
schneider-electric modicon momentum 171cbu98090	All versions
CPE cpe:2.3:h:schneider-electric:modicon_momentum_171cbu98090:-:::::::* Remediation No remediation found in references.
schneider-electric modicon momentum 171cbu98091	All versions
CPE cpe:2.3:h:schneider-electric:modicon_momentum_171cbu98091:-:::::::* Remediation No remediation found in references.
schneider-electric modicon premium tsxp57 1634m	All versions
CPE cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_1634m:-:::::::* Remediation No remediation found in references.
schneider-electric modicon premium tsxp57 2634m	All versions
CPE cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_2634m:-:::::::* Remediation No remediation found in references.
schneider-electric modicon premium tsxp57 2834m	All versions
CPE cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_2834m:-:::::::* Remediation No remediation found in references.
schneider-electric modicon premium tsxp57 454m	All versions
CPE cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_454m:-:::::::* Remediation No remediation found in references.
schneider-electric modicon premium tsxp57 4634m	All versions
CPE cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_4634m:-:::::::* Remediation No remediation found in references.
schneider-electric modicon premium tsxp57 554m	All versions
CPE cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_554m:-:::::::* Remediation No remediation found in references.
schneider-electric modicon premium tsxp57 5634m	All versions
CPE cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_5634m:-:::::::* Remediation No remediation found in references.
schneider-electric modicon premium tsxp57 6634m	All versions
CPE cpe:2.3:h:schneider-electric:modicon_premium_tsxp57_6634m:-:::::::* Remediation No remediation found in references.
schneider-electric modicon quantum 140cpu65150	All versions
CPE cpe:2.3:h:schneider-electric:modicon_quantum_140cpu65150:-:::::::* Remediation No remediation found in references.
schneider-electric modicon quantum 140cpu65150c	All versions
CPE cpe:2.3:h:schneider-electric:modicon_quantum_140cpu65150c:-:::::::* Remediation No remediation found in references.
schneider-electric modicon quantum 140cpu65160	All versions
CPE cpe:2.3:h:schneider-electric:modicon_quantum_140cpu65160:-:::::::* Remediation No remediation found in references.
schneider-electric modicon quantum 140cpu65160c	All versions
CPE cpe:2.3:h:schneider-electric:modicon_quantum_140cpu65160c:-:::::::* Remediation No remediation found in references.
schneider-electric plc simulator for ecostruxure control expert	All versions
CPE cpe:2.3:h:schneider-electric:plc_simulator_for_ecostruxure_control_expert:-:::::::* Remediation No remediation found in references.
schneider-electric plc simulator for ecostruxure process expert	All versions
CPE cpe:2.3:h:schneider-electric:plc_simulator_for_ecostruxure_process_expert:-:::::::* Remediation No remediation found in references.

Change History

6 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Jun 17, 2026	CVE Modified	CISA-ADP
May 29, 2026	CVE Modified	CISA-ADP
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Sep 13, 2021	Initial Analysis	[email protected]

CVE-2021-22792 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation