CVE:CVE-2022-37300
CNNVD:CNNVD-202209-725
Schneider Electric EcoStruxure Control Expert（前称Unity Pro）和Schneider Electric EcoStruxure Process Expert都是法国施耐德电气（Schneider Electric）公司的产品。Schneider Electric EcoStruxure Control Expert是一套用于Schneider Electric逻辑控制器产品的编程软件。Schneider Electric EcoStruxure Process Expert是一个用于设计、操作和维护整个工厂的下一代过程自动化系统。
Schneider Electric多款产品存在授权问题漏洞。攻击者利用该漏洞以读写模式对控制器进行未经授权的访问。以下产品及版本受到影响：EcoStruxure Control Expert（V15.0 SP1版本及之前版本）、 EcoStruxure Process Expert（V2021版本及以前版本）、Modicon M340 CPU（部件号BMXP34*）（V3.40版本及之前版本），Modicon M580 CPU（零件号BMEP*和BMEH*）（V3.20版本及之前版本）。
solution:Upgrade schneider-electric ecostruxure_control_expert to a higher version than 15.1,and avoid the version (,15.1); Upgrade schneider-electric ecostruxure_process_expert to a higher version than 2021,and avoid the version (,2021]; Upgrade schneider-electric modicon_m340_bmxp341000_firmware to a higher version than 3.50,and avoid the version (,3.50); Upgrade schneider-electric modicon_m340_bmxp342000_firmware to a higher version than 3.50,and avoid the version (,3.50); Upgrade schneider-electric modicon_m340_bmxp342010_firmware to a higher version than 3.50,and avoid the version (,3.50); Upgrade schneider-electric modicon_m340_bmxp3420102_firmware to a higher version than 3.50,and avoid the version (,3.50); Upgrade schneider-electric modicon_m340_bmxp342020_firmware to a higher version than 3.50,and avoid the version (,3.50); Upgrade schneider-electric modicon_m340_bmxp342020h_firmware to a higher version than 3.50,and avoid the version (,3.50); Upgrade schneider-electric modicon_m340_bmxp342030_firmware to a higher version than 3.50,and avoid the version (,3.50); Upgrade schneider-electric modicon_m340_bmxp3420302_firmware to a higher version than 3.50,and avoid the version (,3.50); Upgrade schneider-electric modicon_m340_bmxp3420302h_firmware to a higher version than 3.50,and avoid the version (,3.50); Upgrade schneider-electric modicon_m340_bmxp342030h_firmware to a higher version than 3.50,and avoid the version (,3.50); Upgrade schneider-electric modicon_m580_bmeh582040_firmware to a higher version than 4.02,and avoid the version (,4.02); Upgrade schneider-electric modicon_m580_bmeh582040c_firmware to a higher version than 4.02,and avoid the version (,4.02); Upgrade schneider-electric modicon_m580_bmeh582040s_firmware to a higher version than 4.02,and avoid the version (,4.02); Upgrade schneider-electric modicon_m580_bmeh584040_firmware to a higher version than 4.02,and avoid the version (,4.02); Upgrade schneider-electric modicon_m580_bmeh584040c_firmware to a higher version than 4.02,and avoid the version (,4.02); Upgrade schneider-electric modicon_m580_bmeh584040s_firmware to a higher version than 4.02,and avoid the version (,4.02); Upgrade schneider-electric modicon_m580_bmeh586040_firmware to a higher version than 4.02,and avoid the version (,4.02); Upgrade schneider-electric modicon_m580_bmeh586040c_firmware to a higher version than 4.02,and avoid the version (,4.02); Upgrade schneider-electric modicon_m580_bmeh586040s_firmware to a higher version than 4.02,and avoid the version (,4.02); Upgrade schneider-electric modicon_m580_bmep581020_firmware to a higher version than 4.02,and avoid the version (,4.02); Upgrade schneider-electric modicon_m580_bmep581020h_firmware to a higher version than 4.02,and avoid the version (,4.02); Upgrade schneider-electric modicon_m580_bmep582020_firmware to a higher version than 4.02,and avoid the version (,4.02); Upgrade schneider-electric modicon_m580_bmep582020h_firmware to a higher version than 4.02,and avoid the version (,4.02); Upgrade schneider-electric modicon_m580_bmep582040_firmware to a higher version than 4.02,and avoid the version (,4.02); Upgrade schneider-electric modicon_m580_bmep582040h_firmware to a higher version than 4.02,and avoid the version (,4.02); Upgrade schneider-electric modicon_m580_bmep583020_firmware to a higher version than 4.02,and avoid the version (,4.02); Upgrade schneider-electric modicon_m580_bmep583040_firmware to a higher version than 4.02,and avoid the version (,4.02); Upgrade schneider-electric modicon_m580_bmep584020_firmware to a higher version than 4.02,and avoid the version (,4.02); Upgrade schneider-electric modicon_m580_bmep584040_firmware to a higher version than 4.02,and avoid the version (,4.02); Upgrade schneider-electric modicon_m580_bmep584040s_firmware to a higher version than 4.02,and avoid the version (,4.02); Upgrade schneider-electric modicon_m580_bmep585040_firmware to a higher version than 4.02,and avoid the version (,4.02); Upgrade schneider-electric modicon_m580_bmep585040c_firmware to a higher version than 4.02,and avoid the version (,4.02); Upgrade schneider-electric modicon_m580_bmep586040_firmware to a higher version than 4.02,and avoid the version (,4.02); Upgrade schneider-electric modicon_m580_bmep586040c_firmware to a higher version than 4.02,and avoid the version (,4.02)