9.3
Critical
CVE-2024-11737 CWE-20: Improper Input Validation vulnerability exists that could lead to a denial of service and a loss of…
Description
CWE-20: Improper Input Validation vulnerability exists that could lead to a denial of service and a loss of confidentiality, integrity of the controller when an unauthenticated crafted Modbus packet is sent to the device.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Modicon Controllers M241 / M251 | Versions not published | |
| Modicon Controllers M258 / LMC058 | Versions not published |