CVE-2024-31484: falha de alta gravidade em Siemens CPC80 Central Processing/Communication
Publicada em · Atualizada em
Seguir esta CVE+ Monitorar CPCI85 Central Processing/Communication+ Monitorar CPC80 Central Processing/Communication
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.3epss 0.5%
A vulnerability has been identified in CPC80 Central Processing/Communication (All versions < V16.41), CPCI85 Central Processing/Communication (All versions < V5.30), CPCX26 Central Processing/Communication (All versions < V06.02), ETA4 Ethernet Interface IEC60870-5-104 (All versions < V10.46), ETA5 Ethernet Int. 1x100TX IEC61850 Ed.2 (All versions < V03.27), PCCX26 Ax 1703 PE, Contr, Communication Element (All versions < V06.05). The affected devices contain an improper null termination vulnerability while parsing a specific HTTP header. This could allow an attacker to execute code in the context of the current process or lead to denial of service condition.
CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Siemens · CPC80 Central Processing/CommunicationSiemens · CPCI85 Central Processing/CommunicationSiemens · CPCX26 Central Processing/CommunicationSiemens · ETA4 Ethernet Interface IEC60870-5-104Siemens · ETA5 Ethernet Int. 1x100TX IEC61850 Ed.2Siemens · PCCX26 Ax 1703 PE, Contr, Communication ElementCVEs relacionadas — Siemens CPC80 Central Processing/Communication
No mesmo produto, das mais perigosas para as menos.