Skip to content
Sign in
8.1 High

CVE-2023-6408 CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists…

Description

CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause a denial of service and loss of confidentiality, integrity of controllers when conducting a Man in the Middle attack.

Affected products and versions

Product Affected versions Fixed in
Modicon M340 CPU (part numbers BMXP34*) Versions not published
Modicon M580 CPU (part numbers BMEP* and BMEH*, excluding M580 CPU Safety) Versions not published
Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) Versions not published
EcoStruxure Control Expert Versions not published
EcoStruxure Process Expert Versions not published
modicon_m580_bmep585040_firmware 4.20 earliest → < 4.20 4.20
modicon_m340_bmxp342030h_firmware 3.60 earliest → < 3.60 3.60
modicon_m580_bmeh586040s_firmware Versions not published

Other CVEs of Modicon M340 CPU (part numbers BMXP34*)

The 12 CVEs of Modicon M340 CPU (part numbers BMXP34*) →
CVE-2024-8936 CWE-20: Improper Input Validation vulnerability exists that could lead to loss of confidentiality of controller memory… 8.3 High CVE-2024-8938 CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a… 9.2 Critical CVE-2024-8937 CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a… 8.3 High CVE-2024-8935 CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause a denial of service and loss of… 7.7 High
Track this CVE