Schneider ELectric Modicon M580 CPU (part numbers BMEP* and BMEH*, excluding M580 CPU Safety)

• CVE-2024-11425 High 7.5 CWE-131: Incorrect Calculation of Buffer Size vulnerability exists that could cause Denial-of-Service of the product when an unauthenticated user is sending a crafted HTTPS packet to the webserver. 0.6%
• CVE-2023-6408 High 8.1 CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause a denial of service and loss of confidentiality, integrity of c 0.3%