Skip to content
CVE PROGRAM SOURCE RECORD8.3 High

CVE-2024-8937

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
schneider

Description

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a potential arbitrary code execution after a successful Man-In-The Middle attack followed by sending a crafted Modbus function call to tamper with memory area involved in the authentication process.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric Modicon M340 CPU (part numbers BMXP34*)

Default version status: unaffected

  • Versions prior to SV3.65affected

Schneider Electric Modicon MC80 (part numbers BMKC80)

Default version status: unaffected

  • All versionsaffected

Schneider Electric Modicon Momentum Unity M1E Processor (171CBU*)

Default version status: unaffected

  • All Versionsaffected

References