CVE-2024-12142highCWE-200

CVE-2024-12142: high-severity vulnerability in Schneider Electric BMXNOE0100

Published · Updated

Follow this CVE+ Monitor BMXNOE0100+ Monitor BMXNOE0110

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.8epss 0.4%
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause information disclosure of restricted web page, modification of web page and denial of service when specific web pages are modified and restricted functions are invoked.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N
Affected products
Schneider Electric · BMXNOE0100Schneider Electric · BMXNOE0110Schneider Electric · BMXNOR0200HSchneider Electric · Modicon M340 processors (part numbers BMXP34*)