7.8
Élevée
CVE-2024-31484 A vulnerability has been identified in CPC80 Central Processing/Communication (All versions < V16.41), CPCI85 Central…
Description
A vulnerability has been identified in CPC80 Central Processing/Communication (All versions < V16.41), CPCI85 Central Processing/Communication (All versions < V5.30), CPCX26 Central Processing/Communication (All versions < V06.02), ETA4 Ethernet Interface IEC60870-5-104 (All versions < V10.46), ETA5 Ethernet Int. 1x100TX IEC61850 Ed.2 (All versions < V03.27), PCCX26 Ax 1703 PE, Contr, Communication Element (All versions < V06.05). The affected devices contain an improper null termination vulnerability while parsing a specific HTTP header. This could allow an attacker to execute code in the context of the current process or lead to denial of service condition.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| CPC80 Central Processing/Communication 16.41 | premières → < 16.41 | 16.41 |
| CPCI85 Central Processing/Communication 5.30 | premières → < 5.30 | 5.30 |
| CPCX26 Central Processing/Communication 06.02 | premières → < 06.02 | 06.02 |
| ETA4 Ethernet Interface IEC60870-5-104 10.46 | premières → < 10.46 | 10.46 |
| ETA5 Ethernet Int. 1x100TX IEC61850 Ed.2 03.27 | premières → < 03.27 | 03.27 |
| PCCX26 Ax 1703 PE, Contr, Communication Element 06.05 | premières → < 06.05 | 06.05 |
| cpc80_central_processing\/communication 16.41 | premières → < 16.41 | 16.41 |
| cpci85_central_processing\/communication 5.30 | premières → < 5.30 | 5.30 |
Références
- cert-portal.siemens.com cert-portal.siemens.com
- cert-portal.siemens.com cert-portal.siemens.com
- seclists.org seclists.org
Chronologie
- Publiée
- Dernière modification