Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-8933

CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
schneider

Description

CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause retrieval of password hash that could lead to denial of service and loss of confidentiality and integrity of controllers. To be successful, the attacker needs to inject themself inside the logical network while a valid user uploads or downloads a project file into the controller.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric Modicon M340 CPU (part numbers BMXP34*)

Default version status: unaffected

  • All versionsaffected

Schneider Electric Modicon MC80 (part numbers BMKC80)

Default version status: unaffected

  • All versionsaffected

Schneider Electric Modicon Momentum Unity M1E Processor (171CBU*)

Default version status: unaffected

  • All Versionsaffected

References