Vulnerability · Published Jun 12, 2024 · Assigned by schneider
CVE-2024-5056
Medium 6.5
In plain English
A medium-severity security flaw in Modicon M340 from Schneider Electric. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 29% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.4%top 71.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
CWE-552: Files or Directories Accessible to External Parties vulnerability exists which may prevent user to update the device firmware and prevent proper behavior of the webserver when specific files or directories are removed from the filesystem.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Schneider Electric | Modicon M340 | All versions |
| Schneider Electric | Network module, Modicon M340, Modbus/TCP BMXNOE0100 | All versions |
| Schneider Electric | Network module, Modicon M340, Ethernet TCP/IP BMXNOE0110 | All Versions |
Weakness: CWE-552 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L