CVE-2021-22779
high-risk
Published 2021-07-14
Authentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Control Expert V15.0 SP1, EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), SCADAPack RemoteConnect for x70 (all versions), Modicon M580 CPU (all versions - part numbers BMEP* and BMEH*), Modicon M340 CPU (all versions - part numbers BMXP34*), that could cause unauthorized access in read and write mode to the controller by spoofing the Modbus communication between the engineering software and the controller.
Do I need to act?
-
0.19% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.1/10
Critical
NETWORK
/ LOW complexity
Affected Products (20)
Ecostruxure Process Expert
Remoteconnect
Modicon M580 Bmep581020 Firmware
Modicon M580 Bmep581020H Firmware
Modicon M580 Bmep582020 Firmware
Modicon M580 Bmep582020H Firmware
Modicon M580 Bmep582040 Firmware
Modicon M580 Bmep582040H Firmware
Modicon M580 Bmep582040S Firmware
Modicon M580 Bmep583020 Firmware
Modicon M580 Bmep583040 Firmware
Modicon M580 Bmep584020 Firmware
Modicon M580 Bmep584040 Firmware
Modicon M580 Bmep584040S Firmware
Modicon M580 Bmep585040 Firmware
Modicon M580 Bmep585040C Firmware
Modicon M580 Bmep586040 Firmware
Affected Vendors
References (2)
55
/ 100
high-risk
Severity
31/34 · Critical
Exploitability
1/34 · Minimal
Exposure
23/34 · High