Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-8419

Improper Access Control vulnerability in AC4xxS devices

Description

The endpoint hosts a script that allows an unauthorized remote attacker to put the system in a fail-safe state over the network due to missing authentication.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ifm electronic GmbH ifm Smart PLC AC402s

Default version status: unaffected

  • 4.04 to < 4.3.17affected
  • 6.1.8affected

ifm electronic GmbH ifm Smart PLC AC422s

Default version status: unaffected

  • 4.04 to < 4.3.17affected
  • 6.1.8affected

ifm electronic GmbH ifm Smart PLC AC424s

Default version status: unaffected

  • 4.04 to < 4.3.17affected
  • 6.1.8affected

ifm electronic GmbH ifm Smart PLC AC432s

Default version status: unaffected

  • 4.04 to < 4.3.17affected
  • 6.1.8affected

ifm electronic GmbH ifm Smart PLC AC434s

Default version status: unaffected

  • 4.04 to < 4.3.17affected
  • 6.1.8affected

References