{"id":"CVE-2024-12142","state":"PUBLISHED","title":"CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could","description":"CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could\ncause information disclosure of restricted web page, modification of web page and denial of\nservice when specific web pages are modified and restricted functions are invoked.","publishedAt":"2025-01-17T10:19:11.768Z","updatedAt":"2025-02-12T16:51:46.673Z","severity":{"score":8.8,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N","source":"schneider"},"assigner":"schneider","products":["Schneider Electric Modicon M340 processors (part numbers BMXP34*)","Schneider Electric BMXNOE0100","Schneider Electric BMXNOE0110","Schneider Electric BMXNOR0200H"],"affected":[{"vendor":"Schneider Electric","product":"Modicon M340 processors (part numbers BMXP34*)","defaultStatus":"unaffected","versions":[{"version":"All versions","status":"affected"}]},{"vendor":"Schneider Electric","product":"BMXNOE0100","defaultStatus":"unaffected","versions":[{"version":"All versions","status":"affected"}]},{"vendor":"Schneider Electric","product":"BMXNOE0110","defaultStatus":"unaffected","versions":[{"version":"All Versions","status":"affected"}]},{"vendor":"Schneider Electric","product":"BMXNOR0200H","defaultStatus":"unaffected","versions":[{"version":"Versions prior to SV1.70IR26","status":"affected"}]}],"references":["https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-014-05&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-014-05.pdf"],"weaknesses":["CWE-200"],"ingestedAt":"2026-10-29T20:06:50.777Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/12xxx/CVE-2024-12142.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-12142","state":"PUBLISHED","datePublished":"2025-01-17T10:19:11.768Z","dateUpdated":"2025-02-12T16:51:46.673Z","assignerShortName":"schneider","assignerOrgId":"076d1eb6-cfab-4401-b34d-6dfc2a413bdb","dateReserved":"2024-12-04T11:14:37.294Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could\ncause information disclosure of restricted web page, modification of web page and denial of\nservice when specific web pages are modified and restricted functions are invoked."}],"affected":[{"vendor":"Schneider Electric","product":"Modicon M340 processors (part numbers BMXP34*)","defaultStatus":"unaffected","versions":[{"version":"All versions","status":"affected"}]},{"vendor":"Schneider Electric","product":"BMXNOE0100","defaultStatus":"unaffected","versions":[{"version":"All versions","status":"affected"}]},{"vendor":"Schneider Electric","product":"BMXNOE0110","defaultStatus":"unaffected","versions":[{"version":"All Versions","status":"affected"}]},{"vendor":"Schneider Electric","product":"BMXNOR0200H","defaultStatus":"unaffected","versions":[{"version":"Versions prior to SV1.70IR26","status":"affected"}]}],"references":[{"url":"https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-014-05&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-014-05.pdf"}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":8.8,"baseSeverity":"HIGH","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.6,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-200","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"schneider","orgId":"076d1eb6-cfab-4401-b34d-6dfc2a413bdb","dateUpdated":"2025-01-17T10:19:11.768Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-01-17T13:18:13.025284Z","id":"CVE-2024-12142","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-02-12T16:51:46.673Z"}}]}}}