Vulnerability · Published Jun 30, 2025 · Assigned by CERTVDE
CVE-2024-8419Improper Access Control vulnerability in AC4xxS devices
High 7.5
In plain English
A high-severity missing authentication in ifm Smart PLC AC402s from ifm electronic GmbH. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 42% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.5%top 58.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The endpoint hosts a script that allows an unauthorized remote attacker to put the system in a fail-safe state over the network due to missing authentication.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ifm electronic GmbH | ifm Smart PLC AC402s | 4.04 – before 4.3.176.1.8 |
| ifm electronic GmbH | ifm Smart PLC AC422s | 4.04 – before 4.3.176.1.8 |
| ifm electronic GmbH | ifm Smart PLC AC424s | 4.04 – before 4.3.176.1.8 |
| ifm electronic GmbH | ifm Smart PLC AC432s | 4.04 – before 4.3.176.1.8 |
| ifm electronic GmbH | ifm Smart PLC AC434s | 4.04 – before 4.3.176.1.8 |
Weakness: CWE-306 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H