Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2024-11425

CWE-131: Incorrect Calculation of Buffer Size vulnerability exists that could cause Denial-of-Service of the

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
schneider

Description

CWE-131: Incorrect Calculation of Buffer Size vulnerability exists that could cause Denial-of-Service of the product when an unauthenticated user is sending a crafted HTTPS packet to the webserver.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric Modicon M580 CPU (part numbers BMEP* and BMEH*, excluding M580 CPU Safety)

Default version status: unaffected

  • Versions prior to SV4.30affected

Schneider Electric Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S)

Default version status: unaffected

  • Versions prior to SV4.21affected

Schneider Electric BMENOR2200H

Default version status: unaffected

  • All Versionsaffected

Schneider Electric EVLink Pro AC

Default version status: unaffected

  • Versions prior to v1.3.10affected

References