8.7
High
CVE-2024-11425 CWE-131: Incorrect Calculation of Buffer Size vulnerability exists that could cause Denial-of-Service of the product…
Description
CWE-131: Incorrect Calculation of Buffer Size vulnerability exists that could cause Denial-of-Service of the product when an unauthenticated user is sending a crafted HTTPS packet to the webserver.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Modicon M580 CPU (part numbers BMEP* and BMEH*, excluding M580 CPU Safety) | Versions not published | |
| Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) | Versions not published | |
| BMENOR2200H | Versions not published | |
| EVLink Pro AC | Versions not published |