Lucene search

CVE-2024-28750

🗓️ 09 Jul 2024 07:04:15Reported by CERTVDEType

Remote attacker may use file deletion to inject OS command

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 3
Cvelist	CVE-2024-28750 ifm: Deleting function in Smart PLC allows command injections	9 Jul 202407:10	–	cvelist
Vulnrichment	CVE-2024-28750 ifm: Deleting function in Smart PLC allows command injections	9 Jul 202407:10	–	vulnrichment
NVD	CVE-2024-28750	9 Jul 202407:15	–	nvd

[
  {
    "defaultStatus": "unaffected",
    "product": "Smart PLC AC14xx Firmware",
    "vendor": "ifm",
    "versions": [
      {
        "lessThanOrEqual": "V4.3.17",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Smart PLC AC4xxS Firmware",
    "vendor": "ifm",
    "versions": [
      {
        "lessThanOrEqual": "V4.3.17",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
cert	www.cert.vde.com/en/advisories/VDE-2024-012

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

09 Jul 2024 07:15Current

6.9Medium risk

Vulners AI Score6.9

CVSS37.2

EPSS0.00337

SSVC

CWE-78