CVE-2024-8936

HIGH
STIX 2.1 vulnerability

Record summary

CVE-2024-8936 has a selected CVSS score of 8.3 (high).

Description

CWE-20: Improper Input Validation vulnerability exists that could lead to loss of confidentiality of controller memory after a successful Man-In-The-Middle attack followed by sending a crafted Modbus function call used to tamper with memory.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Nov 13, 2024 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Modicon M340 CPU (part numbers BMXP34*)

Browse Schneider Electric / Modicon M340 CPU (part numbers BMXP34*)

Default status: unaffected

CVE ListVersions prior to SV3.65affected

References

2