CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a potential arbitrary code execution after a successful Man-In-The Middle attack followed by sending a crafted Modbus function call to tamper with memory area involved in the authentication process.
History

Wed, 13 Nov 2024 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Wed, 13 Nov 2024 04:30:00 +0000

Type Values Removed Values Added
Description CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a potential arbitrary code execution after a successful Man-In-The Middle attack followed by sending a crafted Modbus function call to tamper with memory area involved in the authentication process.
Weaknesses CWE-119
References
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N'}

cvssV4_0

{'score': 8.3, 'vector': 'CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N'}


cve-icon MITRE

Status: PUBLISHED

Assigner: schneider

Published: 2024-11-13T04:17:30.614Z

Updated: 2024-11-13T15:27:59.982Z

Reserved: 2024-09-17T07:51:37.095Z

Link: CVE-2024-8937

cve-icon Vulnrichment

Updated: 2024-11-13T15:27:53.072Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-11-13T05:15:22.613

Modified: 2024-11-13T17:01:16.850

Link: CVE-2024-8937

cve-icon Redhat

No data.