7 matches found
Schneider Electric Power Logic Authorization Bypass Through User-Controlled Key (CVE-2024-10497)
CWE-639: Authorization Bypass Through User-Controlled Key vulnerability exists that could allow an authorized attacker to modify values outside those defined by their privileges Elevation of Privileges when the attacker sends modified HTTPS requests to the device. This plugin only works with...
CVE-2024-10497
CWE-639: Authorization Bypass Through User-Controlled Key vulnerability exists that could allow an authorized attacker to modify values outside those defined by their privileges Elevation of Privileges when the attacker sends modified HTTPS requests to the device...
CVE-2024-10497
CWE-639: Authorization Bypass Through User-Controlled Key vulnerability exists that could allow an authorized attacker to modify values outside those defined by their privileges Elevation of Privileges when the attacker sends modified HTTPS requests to the device...
CVE-2024-10497
creationtimestamp| type| source ---|---|--- 2025-01-17 10:33:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113843241275511437 2025-01-17 10:57:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2117 2025-01-17 11:15:21+00:00| seen|...
CVE-2024-10497
CWE-639: Authorization Bypass Through User-Controlled Key vulnerability exists that could allow an authorized attacker to modify values outside those defined by their privileges Elevation of Privileges when the attacker sends modified HTTPS requests to the device...
CVE-2024-10497
Schneider Electric PowerLogic HDPM6000 is affected by CVE-2024-10497 (Authorization Bypass Through User-Controlled Key). The vulnerability allows an authorized attacker to modify values outside defined privileges by sending modified HTTPS requests, resulting in Elevation of Privileges. Documents ...
CVE-2024-10497
CWE-639: Authorization Bypass Through User-Controlled Key vulnerability exists that could allow an authorized attacker to modify values outside those defined by their privileges Elevation of Privileges when the attacker sends modified HTTPS requests to the device...