CVE-2022-45789 (ecostruxure_control_expert, ecostruxure_process_expert, modicon_m340_bmxp341000_firmware, modicon_m340_bmxp342000_firmware, modicon_m340_bmxp342010_firmware, modicon_m340_bmxp3420102_firmware, modicon_m340_bmxp342020_firmware, modicon

A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbus functions on the controller when hijacking an authenticated Modbus session. Affected Products: EcoStruxureâ„¢ Control Expert (All Versions), EcoStruxureâ„¢ Process Expert (Versions prior to V2020), Modicon M340 CPU - part numbers BMXP34* (All Versions), Modicon M580 CPU - part numbers BMEP* and BMEH* (All Versions), Modicon M580 CPU Safety - part numbers BMEP58*S and BMEH58*S (All Versions)

authentication authentication bypass bypass capture control cpu cve cve-2022-45789 cwe expert functions hijacking modicon numbers process products replay safety session vulnerability