Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-11737 EUVD-2024-34178GHSA-j45x-3v7g-qxh8

CWE-20: Improper Input Validation vulnerability exists that could lead to a denial of service and a loss of confidentiality, integrity of t…

Published Dec 11, 2024 · Updated Dec 11, 2024 · Assigned by schneider

Vendor: Schneider Electric Product: Modicon Controllers M241 / M251 Product: Modicon Controllers M258 / LMC058 Category: ICS / OT

Description

CWE-20: Improper Input Validation vulnerability exists that could lead to a denial of service and a loss of
confidentiality, integrity of the controller when an unauthenticated crafted Modbus packet is sent to the device.

Affected products

VendorProductAffectedFixed
Schneider Electric Modicon Controllers M241 / M251 All versions —
Schneider Electric Modicon Controllers M258 / LMC058 All versions —

Advisories 3

References