CVE-2024-10498: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could allow an unauthorized attacker to modify configuration values outside of the normal range when the attacker sends specific Modbus write packets to the device which could result in...

CVE-2024-50953

An issue in XINJE XL5E-16T V3.7.2a allows attackers to cause a Denial of Service DoS via a crafted Modbus message...

CVE-2024-50954

The XINJE XL5E-16T and XD5E-24R-E programmable logic controllers V3.5.3b-V3.7.2a have a vulnerability in handling Modbus messages. When a TCP connection is established with the above series of controllers within a local area network LAN, sending a specific Modbus message to the controller can cau...

CVE-2024-50953: Uncontrolled Resource Consumption

An issue in XINJE XL5E-16T V3.7.2a allows attackers to cause a Denial of Service DoS via a crafted Modbus message...

XINJE XL5E-16T security vulnerabilities

The XINJE XL5E-16T is an enhanced Ethernet controller from China XINJE Corporation XINJE. A security vulnerability exists in the XINJE XL5E-16T version 3.7.2a, which originated from a vulnerability that allows an attacker to cause a denial of service via a specially crafted Modbus message...

XINJE XL5E-16T and XINJE XD5E-24R-E have security vulnerabilities

XINJE XL5E-16T and XINJE XD5E-24R-E are both products of China XINJE Corporation XINJE.XINJE XL5E-16T is an enhanced Ethernet controller.XINJE XD5E-24R-E is an Ethernet controller. A security vulnerability exists in the XINJE XL5E-16T and XINJE XD5E-24R-E.5.3b through 3.7.2a versions, which stems...

CVE-2024-50953

An issue in XINJE XL5E-16T V3.7.2a allows attackers to cause a Denial of Service DoS via a crafted Modbus message...

PT-2025-2894

Name of the Vulnerable Software and Affected Versions XINJE XL5E-16T version 3.7.2a Description The issue allows attackers to cause a Denial of Service DoS via a crafted Modbus message. This can be achieved by manipulating a Modbus message, which can lead to a disruption in service. Recommendatio...

PT-2025-2895

Name of the Vulnerable Software and Affected Versions XINJE XL5E-16T and XD5E-24R-E versions V3.5.3b through V3.7.2a Description The vulnerability is related to the handling of Modbus messages. When a TCP connection is established with the controllers within a local area network LAN, sending a...

CVE-2024-50954

The XINJE XL5E-16T and XD5E-24R-E programmable logic controllers V3.5.3b-V3.7.2a have a vulnerability in handling Modbus messages. When a TCP connection is established with the above series of controllers within a local area network LAN, sending a specific Modbus message to the controller can cau...

CVE-2024-50954: Improper Check or Handling of Exceptional Conditions

The XINJE XL5E-16T and XD5E-24R-E programmable logic controllers V3.5.3b-V3.7.2a have a vulnerability in handling Modbus messages. When a TCP connection is established with the above series of controllers within a local area network LAN, sending a specific Modbus message to the controller can cau...

CVE-2024-50953

The XINJE XL5E-16T (an enhanced Ethernet controller from China XINJE Corporation ) version 3.7.2a is vulnerable to a Denial of Service (DoS) attack. The root cause is uncontrolled resource consumption triggered by the processing of a specially crafted Modbus message . While the vulnerability allo...

CVE-2024-50954

The XINJE XL5E-16T and XD5E-24R-E programmable logic controllers (versions V3.5.3b through V3.7.2a ) are vulnerable to a crash caused by improper handling of Modbus messages . An attacker who establishes a TCP connection with the controller within a local area network (LAN) can send a specific Mo...

CVE-2024-50954

The XINJE XL5E-16T and XD5E-24R-E programmable logic controllers V3.5.3b-V3.7.2a have a vulnerability in handling Modbus messages. When a TCP connection is established with the above series of controllers within a local area network LAN, sending a specific Modbus message to the controller can cau...

CVE-2024-50953

An issue in XINJE XL5E-16T V3.7.2a allows attackers to cause a Denial of Service DoS via a crafted Modbus message...

PT-2025-48469

Name of the Vulnerable Software and Affected Versions Socomec DIRIS Digiware M-70 version 1.6.9 Description A denial of service issue exists in the Modbus TCP functionality. Sending a crafted network packet can cause a denial of service. An unauthenticated attacker can trigger this issue by sendi...

PT-2025-48471

Name of the Vulnerable Software and Affected Versions Socomec DIRIS Digiware M-70 version 1.6.9 Description A denial of service condition can occur in the Modbus TCP functionality. Sending a crafted network packet can cause a denial of service and potentially reset credentials to default document...

Vulnerability fixed in Schneider Electric Modicon

Schneider Electric has fixed a vulnerability in devices that use the Modbus protocol. The vulnerability is in how devices using the Modbus protocol validate input. When an unauthenticated and customized Modbus packet is sent to the device, it can result in a denial-of-service, compromising both t...

CVE-2024-11737

CWE-20: Improper Input Validation vulnerability exists that could lead to a denial of service and a loss of confidentiality, integrity of the controller when an unauthenticated crafted Modbus packet is sent to the device...

CVE-2024-11737

CWE-20: Improper Input Validation vulnerability exists that could lead to a denial of service and a loss of confidentiality, integrity of the controller when an unauthenticated crafted Modbus packet is sent to the device...