CVE-2024-5056

🗓️ 12 Jun 2024 12:10:43Reported by schneiderType

Files and directories access vulnerability affecting device firmware and webserver

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of the microprogramming software of Schneider Electric’s programmable logic controller Modicon M340 and its network modules, Modicon M340 BMXNOE0100, Modicon M340 BMXNOE0110, stems from the use of files and directories accessible to external parties. This allows attackers to disrupt the device’s firmware updates and cause improper operation of the web server.	24 Jun 202400:00	–	bdu_fstec
Circl	CVE-2024-5056	26 Jun 202418:28	–	circl
CNNVD	Schneider Electric Modicon M340 安全漏洞	12 Jun 202400:00	–	cnnvd
CNVD	Schneider Electric Modicon M340 Denial of Service Vulnerability	18 Jun 202400:00	–	cnvd
CVE	CVE-2024-5056	12 Jun 202412:10	–	cve
EUVD	EUVD-2024-46320	3 Oct 202520:07	–	euvd
ICS	Schneider Electric Modicon M340, BMXNOE0100, and BMXNOE0110 (Update A)	11 Jun 202400:00	–	ics
NVD	CVE-2024-5056	12 Jun 202412:15	–	nvd
Tenable Nessus	Schneider Electric Modicon M340, BMXNOE0100, and BMXNOE0110 Files or Directories Accessible to External Parties (CVE-2024-5056)	26 Aug 202400:00	–	nessus
Vulnrichment	CVE-2024-5056	12 Jun 202412:10	–	vulnrichment

[
  {
    "defaultStatus": "unaffected",
    "product": "Modicon M340",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Network module, Modicon M340, Modbus/TCP BMXNOE0100",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Network module, Modicon M340, Ethernet TCP/IP BMXNOE0110",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "All Versions"
      }
    ]
  }
]

Source	Link
download	www.download.schneider-electric.com/files

12 Jun 2024 12:10Current

CVSS 3.16.5

EPSS0.00119

CWE-552