6.1
Medium
CVE-2024-12399 CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists…
Description
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause partial loss of confidentiality, loss of integrity and availability of the HMI when attacker performs man in the middle attack by intercepting the communication.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Pro-face GP-Pro EX 5.00 | earliest → < 5.00.100 | 5.00.100 |
| Pro-face Remote HMI 1.70 | earliest → < 1.70.000 | 1.70.000 |