Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2024-12399

CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
schneider

Description

CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause partial loss of confidentiality, loss of integrity and availability of the HMI when attacker performs man in the middle attack by intercepting the communication.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric Pro-face GP-Pro EX

Default version status: unaffected

  • all version to < v5.00.100affected

Schneider Electric Pro-face Remote HMI

Default version status: unaffected

  • all versions to < v1.70.000affected

References