Aller au contenu
Se connecter
8.1 Élevée

CVE-2023-6408 CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists…

Description

CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause a denial of service and loss of confidentiality, integrity of controllers when conducting a Man in the Middle attack.

Produits et versions touchés

Produit Versions touchées Corrigé en
Modicon M340 CPU (part numbers BMXP34*) Versions non publiées
Modicon M580 CPU (part numbers BMEP* and BMEH*, excluding M580 CPU Safety) Versions non publiées
Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) Versions non publiées
EcoStruxure Control Expert Versions non publiées
EcoStruxure Process Expert Versions non publiées
modicon_m580_bmep585040_firmware 4.20 premières → < 4.20 4.20
modicon_m340_bmxp342030h_firmware 3.60 premières → < 3.60 3.60
modicon_m580_bmeh586040s_firmware Versions non publiées

Autres CVE de Modicon M340 CPU (part numbers BMXP34*)

Les 12 CVE de Modicon M340 CPU (part numbers BMXP34*) →
CVE-2024-8936 CWE-20: Improper Input Validation vulnerability exists that could lead to loss of confidentiality of controller memory… 8.3 Élevée CVE-2024-8938 CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a… 9.2 Critique CVE-2024-8937 CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a… 8.3 Élevée CVE-2024-8935 CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause a denial of service and loss of… 7.7 Élevée
Suivre cette CVE