HIGH🇵🇱 Wersja polska

CVE-2023-6408

CVSS 8.1v3.1pub. 2024-02-14upd. 2025-01-23

CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause a denial of service and loss of confidentiality, integrity of controllers when conducting a Man in the Middle attack.

CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Schneider Electric Ecostruxure Control Expert

    APP
    Schneider-Electric
    < 16.0

  • Schneider Electric Ecostruxure Process Expert

    APP
    Schneider-Electric
    < 2023

  • Schneider Electric Modicon M340 Bmxp341000

    HW
    Schneider-Electric
    all versions

  • Schneider Electric Modicon M340 Bmxp341000 Firmware

    OS
    Schneider-Electric
    < 3.60

  • Schneider Electric Modicon M340 Bmxp341000h

    HW
    Schneider-Electric
    all versions

  • Schneider Electric Modicon M340 Bmxp341000h Firmware

    OS
    Schneider-Electric
    < 3.60

  • Schneider Electric Modicon M340 Bmxp342000

    HW
    Schneider-Electric
    all versions

  • Schneider Electric Modicon M340 Bmxp342000 Firmware

    OS
    Schneider-Electric
    < 3.60

  • Schneider Electric Modicon M340 Bmxp342010

    HW
    Schneider-Electric
    all versions

  • Schneider Electric Modicon M340 Bmxp3420102

    HW
    Schneider-Electric
    all versions

  • Schneider Electric Modicon M340 Bmxp3420102cl

    HW
    Schneider-Electric
    all versions

  • Schneider Electric Modicon M340 Bmxp3420102cl Firmware

    OS
    Schneider-Electric
    < 3.60

  • Schneider Electric Modicon M340 Bmxp3420102 Firmware

    OS
    Schneider-Electric
    < 3.60

  • Schneider Electric Modicon M340 Bmxp342010 Firmware

    OS
    Schneider-Electric
    < 3.60

  • Schneider Electric Modicon M340 Bmxp342020

    HW
    Schneider-Electric
    all versions

  • Schneider Electric Modicon M340 Bmxp342020 Firmware

    OS
    Schneider-Electric
    < 3.60

  • Schneider Electric Modicon M340 Bmxp342020h

    HW
    Schneider-Electric
    all versions

  • Schneider Electric Modicon M340 Bmxp342020h Firmware

    OS
    Schneider-Electric
    < 3.60

  • Schneider Electric Modicon M340 Bmxp342030

    HW
    Schneider-Electric
    all versions

  • Schneider Electric Modicon M340 Bmxp3420302

    HW
    Schneider-Electric
    all versions

  • Schneider Electric Modicon M340 Bmxp3420302cl

    HW
    Schneider-Electric
    all versions

  • Schneider Electric Modicon M340 Bmxp3420302cl Firmware

    OS
    Schneider-Electric
    < 3.60

  • Schneider Electric Modicon M340 Bmxp3420302 Firmware

    OS
    Schneider-Electric
    < 3.60

  • Schneider Electric Modicon M340 Bmxp3420302h

    HW
    Schneider-Electric
    all versions

  • Schneider Electric Modicon M340 Bmxp3420302h Firmware

    OS
    Schneider-Electric
    < 3.60

  • Schneider Electric Modicon M340 Bmxp342030 Firmware

    OS
    Schneider-Electric
    < 3.60

  • Schneider Electric Modicon M340 Bmxp342030h

    HW
    Schneider-Electric
    all versions

  • Schneider Electric Modicon M340 Bmxp342030h Firmware

    OS
    Schneider-Electric
    < 3.60

  • Schneider Electric Modicon M580 Bmeh582040

    HW
    Schneider-Electric
    all versions

  • Schneider Electric Modicon M580 Bmeh582040c

    HW
    Schneider-Electric
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2022-37300CRITICAL9.8PL ✓same product

Słaby mechanizm odzyskiwania hasła w produktach Schneider Electric — dostęp przez Modbus

CVE-2022-26507CRITICAL9.8PL ✓same product

Heap-based buffer overflow w AT&T Xmill — możliwe zdalne wykonanie kodu

CVE-2021-22779CRITICAL9.1PL ✓same product

Authentication Bypass w produktach Schneider Electric via Modbus Spoofing

CVE-2020-7540CRITICAL9.8PL ✓same product

Brak uwierzytelnienia w serwerze Web na sterownikach Schneider Modicon M340

CVE-2020-7533CRITICAL9.8PL ✓same product

Obejście uwierzytelnienia w serwerze WWW Schneider Electric Modicon M340