CVE:CVE-2021-22791
CNNVD:CNNVD-202109-123
Schneider Electric Modicon M580等都是法国施耐德电气（Schneider Electric）公司的产品。Schneider Electric Modicon M580是一款可编程自动化控制器。Schneider Electric Modicon Quantum是一款用于过程应用、高可用性和安全解决方案的大型可编程逻辑控制器（PLC）。Schneider Electric Modicon M340是一款用于工业过程和基础设施的中程PLC（可编程逻辑控制器）。
多款 Schneider Electric 产品中存在缓冲区错误漏洞，该漏洞源于产品CPU的控制器应用未对升级文件做有效验证。攻击者可通过特殊的文件导致越界写从而引发拒绝服务。 以下产品和版本受到影响：Schneider Electric Modicon M580,Schneider Electric Modicon Quantum,Schneider Electric Modicon M340,Schneider Electric Modicon M580 CPU,Schneider Electric Modicon Premium
solution:Upgrade schneider-electric modicon_m340_bmxp341000 to a higher version than -; Upgrade schneider-electric modicon_m340_bmxp342010 to a higher version than -; Upgrade schneider-electric modicon_m340_bmxp342020 to a higher version than -; Upgrade schneider-electric modicon_m340_bmxp342030 to a higher version than -; Upgrade schneider-electric modicon_m580_bmeh582040 to a higher version than -; Upgrade schneider-electric modicon_m580_bmeh582040c to a higher version than -; Upgrade schneider-electric modicon_m580_bmeh582040s to a higher version than -; Upgrade schneider-electric modicon_m580_bmeh584040 to a higher version than -; Upgrade schneider-electric modicon_m580_bmeh584040c to a higher version than -; Upgrade schneider-electric modicon_m580_bmeh584040s to a higher version than -; Upgrade schneider-electric modicon_m580_bmeh586040 to a higher version than -; Upgrade schneider-electric modicon_m580_bmeh586040c to a higher version than -; Upgrade schneider-electric modicon_m580_bmeh586040s to a higher version than -; Upgrade schneider-electric modicon_m580_bmep581020 to a higher version than -; Upgrade schneider-electric modicon_m580_bmep581020h to a higher version than -; Upgrade schneider-electric modicon_m580_bmep582020 to a higher version than -; Upgrade schneider-electric modicon_m580_bmep582020h to a higher version than -; Upgrade schneider-electric modicon_m580_bmep582040 to a higher version than -; Upgrade schneider-electric modicon_m580_bmep582040h to a higher version than -; Upgrade schneider-electric modicon_m580_bmep582040s to a higher version than -; Upgrade schneider-electric modicon_m580_bmep583020 to a higher version than -; Upgrade schneider-electric modicon_m580_bmep583040 to a higher version than -; Upgrade schneider-electric modicon_m580_bmep584020 to a higher version than -; Upgrade schneider-electric modicon_m580_bmep584040 to a higher version than -; Upgrade schneider-electric modicon_m580_bmep584040s to a higher version than -; Upgrade schneider-electric modicon_m580_bmep585040 to a higher version than -; Upgrade schneider-electric modicon_m580_bmep585040c to a higher version than -; Upgrade schneider-electric modicon_m580_bmep586040 to a higher version than -; Upgrade schneider-electric modicon_m580_bmep586040c to a higher version than -; Upgrade schneider-electric modicon_mc80_bmkc8020301 to a higher version than -; Upgrade schneider-electric modicon_mc80_bmkc8020310 to a higher version than -; Upgrade schneider-electric modicon_mc80_bmkc8030311 to a higher version than -; Upgrade schneider-electric modicon_momentum_171cbu78090 to a higher version than -; Upgrade schneider-electric modicon_momentum_171cbu98090 to a higher version than -; Upgrade schneider-electric modicon_momentum_171cbu98091 to a higher version than -; Upgrade schneider-electric modicon_premium_tsxp57_1634m to a higher version than -; Upgrade schneider-electric modicon_premium_tsxp57_2634m to a higher version than -; Upgrade schneider-electric modicon_premium_tsxp57_2834m to a higher version than -; Upgrade schneider-electric modicon_premium_tsxp57_454m to a higher version than -; Upgrade schneider-electric modicon_premium_tsxp57_4634m to a higher version than -; Upgrade schneider-electric modicon_premium_tsxp57_554m to a higher version than -; Upgrade schneider-electric modicon_premium_tsxp57_5634m to a higher version than -; Upgrade schneider-electric modicon_premium_tsxp57_6634m to a higher version than -; Upgrade schneider-electric modicon_quantum_140cpu65150 to a higher version than -; Upgrade schneider-electric modicon_quantum_140cpu65150c to a higher version than -; Upgrade schneider-electric modicon_quantum_140cpu65160 to a higher version than -; Upgrade schneider-electric modicon_quantum_140cpu65160c to a higher version than -; Upgrade schneider-electric plc_simulator_for_ecostruxure_control_expert to a higher version than -; Upgrade schneider-electric plc_simulator_for_ecostruxure_process_expert to a higher version than -