CVE-2024-8933

🗓️ 13 Nov 2024 04:06:09Reported by schneiderType

Improper enforcement of message integrity in communication channel may lead to retrieval of password hash, resulting in denial of service and loss of confidentiality and integrity of controller

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	The vulnerability of microprogrammed software for Schneider Electric Modicon M340 CPU BMXP34, Modicon MC80 BMKC80, and Modicon Momentum Unity M1E Processor 171CBU lies in the lack of checks for the integrity of messages during transmission over communication channels. This allows attackers to disclose sensitive information or cause malfunctions in the system.	9 Dec 202400:00	–	bdu_fstec
Circl	CVE-2024-8933	13 Nov 202405:47	–	circl
CNNVD	Schneider Electric Modicon M340 安全漏洞	13 Nov 202400:00	–	cnnvd
CVE	CVE-2024-8933	13 Nov 202404:06	–	cve
EUVD	EUVD-2024-49491	3 Oct 202520:07	–	euvd
ICS	Schneider Electric Modicon M340, MC80, and Momentum Unity M1E & EcoStruxure (Update A)	12 Nov 202400:00	–	ics
NVD	CVE-2024-8933	13 Nov 202404:15	–	nvd
Positive Technologies	PT-2024-9215 · Schneider Electric · Modicon Mc80 Bmkc80 +2	12 Nov 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-8933	4 Feb 202522:45	–	redhatcve
Tenable Nessus	Schneider Electric Modicon M340, MC80, and Momentum Unity M1E Improper Enforcement of Message Integrity During Transmission in a Communication Channel (CVE-2024-8933)	28 Nov 202400:00	–	nessus

[
  {
    "defaultStatus": "unaffected",
    "product": "Modicon M340 CPU (part numbers BMXP34*)",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Modicon MC80 (part numbers BMKC80)",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Modicon Momentum Unity M1E Processor (171CBU*)",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "All Versions"
      }
    ]
  }
]

Source	Link
download	www.download.schneider-electric.com/doc/SEVD-2024-317-02/SEVD-2024-317-02.pdf

13 Nov 2024 04:06Current

CVSS 47.5

CVSS 3.17.5

EPSS0.00093

CWE-924