CVE-2024-12399mediumCWE-924

CVE-2024-12399: medium-severity vulnerability in Schneider Electric Pro-face GP-Pro EX

Published · Updated

Follow this CVE+ Monitor ProFace GP-Pro EX+ Monitor Pro-face Remote HMI

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.1epss 0.2%
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause partial loss of confidentiality, loss of integrity and availability of the HMI when attacker performs man in the middle attack by intercepting the communication.
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Schneider Electric · Pro-face GP-Pro EXSchneider Electric · Pro-face Remote HMI