HIGH🇬🇧 English

CVE-2023-6408

CVSS 8.1v3.1pub. 2024-02-14upd. 2025-01-23

CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause a denial of service and loss of confidentiality, integrity of controllers when conducting a Man in the Middle attack.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Schneider Electric Ecostruxure Control Expert

    APP
    Schneider-Electric
    < 16.0

  • Schneider Electric Ecostruxure Process Expert

    APP
    Schneider-Electric
    < 2023

  • Schneider Electric Modicon M340 Bmxp341000

    HW
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Modicon M340 Bmxp341000 Firmware

    OS
    Schneider-Electric
    < 3.60

  • Schneider Electric Modicon M340 Bmxp341000h

    HW
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Modicon M340 Bmxp341000h Firmware

    OS
    Schneider-Electric
    < 3.60

  • Schneider Electric Modicon M340 Bmxp342000

    HW
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Modicon M340 Bmxp342000 Firmware

    OS
    Schneider-Electric
    < 3.60

  • Schneider Electric Modicon M340 Bmxp342010

    HW
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Modicon M340 Bmxp3420102

    HW
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Modicon M340 Bmxp3420102cl

    HW
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Modicon M340 Bmxp3420102cl Firmware

    OS
    Schneider-Electric
    < 3.60

  • Schneider Electric Modicon M340 Bmxp3420102 Firmware

    OS
    Schneider-Electric
    < 3.60

  • Schneider Electric Modicon M340 Bmxp342010 Firmware

    OS
    Schneider-Electric
    < 3.60

  • Schneider Electric Modicon M340 Bmxp342020

    HW
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Modicon M340 Bmxp342020 Firmware

    OS
    Schneider-Electric
    < 3.60

  • Schneider Electric Modicon M340 Bmxp342020h

    HW
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Modicon M340 Bmxp342020h Firmware

    OS
    Schneider-Electric
    < 3.60

  • Schneider Electric Modicon M340 Bmxp342030

    HW
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Modicon M340 Bmxp3420302

    HW
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Modicon M340 Bmxp3420302cl

    HW
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Modicon M340 Bmxp3420302cl Firmware

    OS
    Schneider-Electric
    < 3.60

  • Schneider Electric Modicon M340 Bmxp3420302 Firmware

    OS
    Schneider-Electric
    < 3.60

  • Schneider Electric Modicon M340 Bmxp3420302h

    HW
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Modicon M340 Bmxp3420302h Firmware

    OS
    Schneider-Electric
    < 3.60

  • Schneider Electric Modicon M340 Bmxp342030 Firmware

    OS
    Schneider-Electric
    < 3.60

  • Schneider Electric Modicon M340 Bmxp342030h

    HW
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Modicon M340 Bmxp342030h Firmware

    OS
    Schneider-Electric
    < 3.60

  • Schneider Electric Modicon M580 Bmeh582040

    HW
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Modicon M580 Bmeh582040c

    HW
    Schneider-Electric
    wszystkie wersje
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
DoS
CWE
Referencje

Powiązane podatności

CVE-2022-37300CRITICAL9.8ten sam produkt

A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists that could cause unaut...

CVE-2022-26507CRITICAL9.8ten sam produkt

A heap-based buffer overflow exists in XML Decompression DecodeTreeBlock in AT&T Labs Xmill 0.7. A crafted inp...

CVE-2021-22779CRITICAL9.1ten sam produkt

Authentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert (all versions prior to V1...

CVE-2020-7540CRITICAL9.8ten sam produkt

A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Web Server on Modicon M340...

CVE-2020-7533CRITICAL9.8ten sam produkt

CWE-287: Improper Authentication vulnerability exists which could cause the execution of commands on the webse...