CVE-2024-8419

🗓️ 30 Jun 2025 09:39:50Reported by CERTVDEType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 15 Views

CVE-2024-8419 is an improper access control vulnerability in AC4xxS devices allowing remote attacks.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2024-8419	30 Jun 202510:15	–	attackerkb
Circl	CVE-2024-8419	30 Jun 202510:07	–	circl
CNNVD	ifm electronic Smart PLC AC4xxS 访问控制错误漏洞	30 Jun 202500:00	–	cnnvd
Cvelist	CVE-2024-8419 Improper Access Control vulnerability in AC4xxS devices	30 Jun 202509:39	–	cvelist
EUVD	EUVD-2024-54715	3 Oct 202520:07	–	euvd
NVD	CVE-2024-8419	30 Jun 202510:15	–	nvd
Positive Technologies	PT-2025-27430	30 Jun 202500:00	–	ptsecurity
RedhatCVE	CVE-2024-8419	2 Jul 202510:17	–	redhatcve
Vulnrichment	CVE-2024-8419 Improper Access Control vulnerability in AC4xxS devices	30 Jun 202509:39	–	vulnrichment

Vulners

Node

ifm_electronic_gmbh ifm_smart_plc_ac402sRange<4.3.17

ifm_electronic_gmbh ifm_smart_plc_ac402sMatch6.1.8

ifm_electronic_gmbh ifm_smart_plc_ac422sRange<4.3.17

ifm_electronic_gmbh ifm_smart_plc_ac422sMatch6.1.8

ifm_electronic_gmbh ifm_smart_plc_ac424sRange<4.3.17

ifm_electronic_gmbh ifm_smart_plc_ac424sMatch6.1.8

ifm_electronic_gmbh ifm_smart_plc_ac432sRange<4.3.17

ifm_electronic_gmbh ifm_smart_plc_ac432sMatch6.1.8

ifm_electronic_gmbh ifm_smart_plc_ac434sRange<4.3.17

ifm_electronic_gmbh ifm_smart_plc_ac434sMatch6.1.8

[
  {
    "defaultStatus": "unaffected",
    "product": "ifm Smart PLC AC402s",
    "vendor": "ifm electronic GmbH",
    "versions": [
      {
        "lessThan": "4.3.17",
        "status": "affected",
        "version": "4.04",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "6.1.8"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "ifm Smart PLC AC422s",
    "vendor": "ifm electronic GmbH",
    "versions": [
      {
        "lessThan": "4.3.17",
        "status": "affected",
        "version": "4.04",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "6.1.8"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "ifm Smart PLC AC424s",
    "vendor": "ifm electronic GmbH",
    "versions": [
      {
        "lessThan": "4.3.17",
        "status": "affected",
        "version": "4.04",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "6.1.8"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "ifm Smart PLC AC432s",
    "vendor": "ifm electronic GmbH",
    "versions": [
      {
        "lessThan": "4.3.17",
        "status": "affected",
        "version": "4.04",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "6.1.8"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "ifm Smart PLC AC434s",
    "vendor": "ifm electronic GmbH",
    "versions": [
      {
        "lessThan": "4.3.17",
        "status": "affected",
        "version": "4.04",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "6.1.8"
      }
    ]
  }
]

Source	Link
cert	www.cert.vde.com/en/advisories/VDE-2024-061

15 Apr 2026 00:35Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.17.5

EPSS0.00542

SSVC

CWE-306

cve-2024-8419 improper access control ac4xxs devices remote attacker fail-safe state missing authentication