CVE-2024-50954

The XINJE XL5E-16T and XD5E-24R-E programmable logic controllers (versions V3.5.3b through V3.7.2a ) are vulnerable to a crash caused by improper handling of Modbus messages . An attacker who establishes a TCP connection with the controller within a local area network (LAN) can send a specific Mo...