Lucene search
+L

CVE-2024-6407

🗓️ 11 Jul 2024 09:07:40Reported by schneiderType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 63 Views

Information Exposure vulnerability in CVE-2024-640

Related
Detection
Affected
Refs
Social
ReporterTitlePublishedViews
Family
circl
Circl
CVE-2024-6407
11 Jul 202412:53
circl
cnnvd
CNNVD
Schneider Electric Wiser Home Controller WHC-5918A Information Disclosure Vulnerability
11 Jul 202400:00
cnnvd
cvelist
Cvelist
CVE-2024-6407
11 Jul 202409:07
cvelist
euvd
EUVD
EUVD-2024-47511
3 Oct 202520:07
euvd
ics
ICS
Schneider Electric Wiser Home Controller WHC-5918A
9 Jul 202400:00
ics
nvd
NVD
CVE-2024-6407
11 Jul 202410:15
nvd
ptsecurity
Positive Technologies
PT-2024-37601 · Schneider Electric · Wiser Home Controller Whc-5918A +1
11 Jul 202400:00
ptsecurity
redhatcve
RedhatCVE
CVE-2024-6407
5 Feb 202503:03
redhatcve
vulnrichment
Vulnrichment
CVE-2024-6407
11 Jul 202409:07
vulnrichment
[
  {
    "defaultStatus": "unaffected",
    "product": "Wiser Home Controller WHC-5918A",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "All Versions of Wiser Home Controller WHC-5918A"
      }
    ]
  }
]

syedaquib77

Vulnerability Alert: ICS Vulnerabilities in Siemens, Schneider Electric, and ABB Products Timeline: Disclosure: 2025-04-22, Patch: TBA Attribution: CISA CVE ID: CVE-2025-40312 Base Score: 9.3 cvssSeverity: Critical ExploitMaturity: Not Available AffectedVersions: - Siemens TeleControl Server Basic SQL - Siemens TeleControl Server Basic - Schneider Electric Wiser Home Controller WHC-5918A - ABB MV Drives - Schneider Electric Modicon M580 PLCs - BMENOR2200H - EVLink Pro AC FixedVersions: - Patches and firmware updates available from Siemens and Schneider Electric Attack Vectors: - SQL Injection - Privilege Escalation - Authentication Bypass - Remote Command Execution - Denial of Service Summary: CISA has issued five advisories for critical vulnerabilities affecting Industrial Control Systems (ICS) from Siemens, Schneider Electric, and ABB. These vulnerabilities include SQL injection flaws (CVE-2025-40312, CVE-2025-40313) in Siemens TeleControl Server Basic SQL allowing unauthorized database access, a privilege escalation flaw (CVE-2025-40314) in Siemens TeleControl Server Basic, authentication bypass (CVE-2025-40321) and remote command execution (CVE-2025-40322) in Schneider Electric Wiser Home Controller WHC-5918A, an information exposure vulnerability (CVE-2024-6407) with a CVSS v4 score of 9.3 in Schneider Electric products, and a denial-of-service (DoS) vulnerability (CVE-2025-40987) in ABB MV Drives. Exploitation of these vulnerabilities could lead to data theft, manipulation, disruption of operations, or safety incidents in industrial automation and critical infrastructure. Impact Scope: Potential for data theft, manipulation, and operational disruption in critical infrastructure. Recommended Actions: - Apply patches and firmware updates from Siemens and Schneider Electric promptly - Restrict network access - Audit user privileges Related Resources: - https://t.co/XPbuYzDpyy - https://t.co/sz0omqTSvz - https://t.co/VvhNk7NuGg - https://t.co/TW9N037sF1 - https://t.co/zqi85BjNPO - https://t.co/A7IKrysT43 - https://t.co/x6GVw7fLsc - https://t.co/dKBhZGWUou Tags: #ICS #CISA #Siemens #SchneiderElectric #ABB #Vulnerabilities #SQLInjection #PrivilegeEscalation #AuthenticationBypass #RCE #DoS #CriticalInfrastructure #Cybersecurity

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 08:17Current
9.2High risk
Vulners AI Score9.2
CVSS 3.17.5 - 9.8
EPSS0.00426
SSVC
63