Lucene search

[email protected]NVD:CVE-2024-31416

HistorySep 13, 2024 - 5:15 p.m.

CVE-2024-31416

2024-09-1317:15:12

CWE-1284

[email protected]

web.nvd.nist.gov

eaton foreseer software

input fields

security flaw

memory consumption

integer overflow

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

14.1%

JSON

The Eaton Foreseer software provides multiple customizable input fields for the users to configure parameters in the tool like alarms, reports, etc. Some of these input fields were not checking the length and bounds of the entered value. The exploit of this security flaw by a bad actor may result in excessive memory consumption or integer overflow.

Affected configurations

Nvd

Node

eatonforeseer_electrical_power_monitoring_systemRange<7.8.600

VendorProductVersionCPE
eatonforeseer_electrical_power_monitoring_system*cpe:2.3:a:eaton:foreseer_electrical_power_monitoring_system:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
eaton	foreseer_electrical_power_monitoring_system	*	cpe:2.3:a:eaton:foreseer_electrical_power_monitoring_system::::::::

References

www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2024-1008.pdf

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

14.1%

JSON

Related for NVD:CVE-2024-31416

vulnrichment1 cvelist1 cve1