CVE-2023-6408highCWE-924

CVE-2023-6408: falha de alta gravidade em Schneider Electric EcoStruxure Control Expert

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Modicon M340 CPU+ Monitorar EcoStruxure Control Expert

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.1epss 0.3%
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause a denial of service and loss of confidentiality, integrity of controllers when conducting a Man in the Middle attack.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Schneider Electric · EcoStruxure Control ExpertSchneider Electric · EcoStruxure Process ExpertSchneider Electric · Modicon M340 CPU (part numbers BMXP34*)Schneider Electric · Modicon M580 CPU (part numbers BMEP* and BMEH*, excluding M580 CPU Safety)Schneider Electric · Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S)
CVEs relacionadas — Schneider Electric EcoStruxure Control Expert

No mesmo produto, das mais perigosas para as menos.

CVE-2021-22797HIGHCVE-2021-22797EPSS 26.1%CVE-2022-45789HIGHCVE-2022-45789EPSS 1.5%CVE-2022-45788HIGHCVE-2022-45788EPSS 1.2%CVE-2022-24323MEDIUMCVE-2022-24323EPSS 0.9%CVE-2023-27976HIGHCVE-2023-27976EPSS 0.8%CVE-2022-37301HIGHCVE-2022-37301EPSS 0.8%