Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2024-28749

ifm: Writing file function in Smart PLC allows command injections

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

A remote attacker with high privileges may use a writing file function to inject OS commands.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ifm Smart PLC AC14xx Firmware

Default version status: unaffected

  • 0 to ≤ V4.3.17affected

ifm Smart PLC AC4xxS Firmware

Default version status: unaffected

  • 0 to ≤ V4.3.17affected

References