CWE-20: Improper Input Validation vulnerability exists that could lead to loss of confidentiality of controller memory after a successful Man-In-The-Middle attack followed by sending a crafted Modbus function call used to tamper with memory.
History

Wed, 13 Nov 2024 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Wed, 13 Nov 2024 04:45:00 +0000

Type Values Removed Values Added
Description CWE-20: Improper Input Validation vulnerability exists that could lead to loss of confidentiality of controller memory after a successful Man-In-The-Middle attack followed by sending a crafted Modbus function call used to tamper with memory.
Weaknesses CWE-20
References
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N'}

cvssV4_0

{'score': 8.3, 'vector': 'CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N'}


cve-icon MITRE

Status: PUBLISHED

Assigner: schneider

Published: 2024-11-13T04:23:59.219Z

Updated: 2024-11-13T15:21:25.836Z

Reserved: 2024-09-17T07:48:38.234Z

Link: CVE-2024-8936

cve-icon Vulnrichment

Updated: 2024-11-13T15:21:22.320Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-11-13T05:15:20.540

Modified: 2024-11-13T17:01:16.850

Link: CVE-2024-8936

cve-icon Redhat

No data.