9.2
Critical
CVE-2024-8938 CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a…
Description
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a potential arbitrary code execution after a successful Man-In-The-Middle attack followed by sending a crafted Modbus function call to tamper with memory area involved in memory size computation.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Modicon M340 CPU (part numbers BMXP34*) | Versions not published | |
| Modicon MC80 (part numbers BMKC80) | Versions not published | |
| Modicon Momentum Unity M1E Processor (171CBU*) | Versions not published | |
| modicon_m340 | Versions not published | |
| modicon_mc80 | Versions not published | |
| modicon_momentum_unity_m1e_processor | Versions not published |
Other CVEs of Modicon M340 CPU (part numbers BMXP34*)
The 12 CVEs of Modicon M340 CPU (part numbers BMXP34*) →
CVE-2024-8936
CWE-20: Improper Input Validation vulnerability exists that could lead to loss of confidentiality of controller memory…
8.3
High
CVE-2024-8937
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a…
8.3
High
CVE-2024-8935
CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause a denial of service and loss of…
7.7
High
CVE-2024-8933
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists…
7.5
High