CVE-2024-11425
High
Description
CWE-131: Incorrect Calculation of Buffer Size vulnerability exists that could cause Denial-of-Service of the product when an unauthenticated user is sending a crafted HTTPS packet to the webserver.
SeverityHigh
CVSS7.5
Exploit probability—
ProductModicon M580 CPU (part numbers BMEP* and BMEH*, excluding M580 CPU Safety)
PublishedJan 17, 2025
First seenJan 17, 2025
Weakness typeCWE-131CWE-131
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Schneider Electric Modicon M580 CPU (part numbers BMEP* and BMEH*, excluding M580 CPU Safety) | Versions prior to SV4.30 | — |
| Schneider Electric Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) | Versions prior to SV4.21 | — |
| Schneider Electric BMENOR2200H | No range specified | — |
| Schneider Electric EVLink Pro AC | Versions prior to v1.3.10 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.