Lucene search
CERTVDECVE-2024-6876HistorySep 10, 2024 - 4:15 p.m.
CVE-2024-6876
2024-09-1016:15:22
CWE-125
CERTVDE
web.nvd.nist.gov
22
oscat basic library
out-of-bounds
plc crash
vulnerability
local attacker
unprivileged access
internal data
CVSS3
5.1
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
AI Score
6.7
Confidence
Low
EPSS
0
Percentile
9.6%
Out-of-Bounds read vulnerability in OSCAT Basic Library allows an local, unprivileged attacker to access limited internal data of the PLC which may lead to a crash of the affected service.
Affected configurations
Node
codesysoscat_basic_libraryRange<3.5.5.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| codesys | oscat_basic_library | * | cpe:2.3:a:codesys:oscat_basic_library:*:*:*:*:*:*:*:* |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "OSCAT Basic Library",
"vendor": "oscat.de",
"versions": [
{
"lessThan": "3.3.5",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "OSCAT Basic Library",
"vendor": "oscat.de",
"versions": [
{
"lessThan": "335",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "OSCAT Basic Library",
"vendor": "CODESYS",
"versions": [
{
"lessThan": "<3.3.5.0",
"status": "affected",
"version": "0.0.0",
"versionType": "semver"
}
]
}
]Related
nvd
nvd
CVE-2024-6876
2024-09-10 16:15:22
vulnrichment
vulnrichment
CVE-2024-6876 Out-of-bounds read in OSCAT-Library
2024-09-10 15:08:16
cvelist
cvelist
CVE-2024-6876 Out-of-bounds read in OSCAT-Library
2024-09-10 15:08:16
CVSS3
5.1
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
AI Score
6.7
Confidence
Low
EPSS
0
Percentile
9.6%
Related for CVE-2024-6876