What’s Vulnerable › Vulnerabilities
CVE-2024-8933
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-11-13 · updated 2026-06-17
- Weakness: CWE-924
Description
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause retrieval of password hash that could lead to denial of service and loss of confidentiality and integrity of controllers. To be successful, the attacker needs to inject themself inside the logical network while a valid user uploads or downloads a project file into the controller.
Affected products
- Schneider Electric SE Modicon M340: all versions
- Schneider-Electric Modicon Mc80: all versions
- Schneider-Electric Modicon Momentum Unity M1E Processor: all versions
References
Get alerted when CVE-2024-8933 or the next vulnerability affects your stack