8.7 High

CVE-2024-11999 CWE-1104: Use of Unmaintained Third-Party Components vulnerability exists that could cause complete control of the…

Description

CWE-1104: Use of Unmaintained Third-Party Components vulnerability exists that could cause complete control of the device when an authenticated user installs malicious code into HMI product.

Affected products and versions

Product	Affected versions	Fixed in
Harmony (Formerly Magelis) HMIST6, HMISTM6, HMIG3U, HMIG3X, HMISTO7 series with EcoStruxure Operator Terminal Expert runtime	Versions not published
PFXST6000, PFXSTM6000, PFXSP5000, PFXGP4100 series with Pro-face BLUE runtime	Versions not published

Do you use Harmony (Formerly Magelis) HMIST6, HMISTM6, HMIG3U, HMIG3X, HMISTO7 series with EcoStruxure Operator Terminal Expert runtime?

Track this CVE Watch Harmony (Formerly Magelis) HMIST6, HMISTM6, HMIG3U, HMIG3X, HMISTO7 series with EcoStruxure Operator Terminal Expert runtime Check my SBOMs

www.cveye.io/en/cve/CVE-2024-11999

Timeline

Published December 17, 2024
Last modified December 17, 2024

References

download.schneider-electric.com download.schneider-electric.com

Track this CVE