Schneider Electric Modicon Improper Input Validation (CVE-2024-11737)

An improper input validation vulnerability exists that could lead to a denial-of-service and a loss of confidentiality and integrity in the controller when an unauthenticated crafted Modbus packet is sent to the device. This plugin only works with Tenable.ot. Please visit...

CVE-2024-11737

creationtimestamp| type| source ---|---|--- 2024-12-11 09:39:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113633523001138853 2024-12-11 12:43:54+00:00| seen| https://t.me/cvedetector/12627 2024-12-17 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-352-...

CVE-2024-11737

CWE-20: Improper Input Validation vulnerability exists that could lead to a denial of service and a loss of confidentiality, integrity of the controller when an unauthenticated crafted Modbus packet is sent to the device...

CVE-2024-11737

CVE-2024-11737 affects Schneider Electric Modicon controllers (M241/M251/M258 and LMC058). The vulnerability is improper input validation in Modbus processing, allowing an unauthenticated crafted Modbus packet to cause denial of service and compromise confidentiality and integrity of the controll...

CVE-2024-11737

CWE-20: Improper Input Validation vulnerability exists that could lead to a denial of service and a loss of confidentiality, integrity of the controller when an unauthenticated crafted Modbus packet is sent to the device...