Researchers Warn of Critical Security Bugs in Schneider Electric Modicon PLCs

Security researchers have disclosed two new vulnerabilities affecting Schneider Electric Modicon programmable logic controllers (PLCs) that could allow for authentication bypass and remote code execution.
The flaws, tracked as CVE-2022-45788 (CVSS score: 7.5) and CVE-2022-45789 (CVSS score: 8.1), are part of a broader collection of security defects tracked by Forescout as OT:ICEFALL.
Successful

authentication authentication bypass bugs bypass code code execution collection controllers critical cve cve-2022-45788 cve-2022-45789 cvss electric flaws forescout icefall logic modicon modicon plcs ot:icefall plcs programmable logic controllers remote code remote code execution researchers schneider schneider electric score security security researchers vulnerabilities