ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2023-6408

—
CVSS 3.1
8.1 high
EPSS
<1%p24
Published
()
Modified
Description

CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause a denial of service and loss of confidentiality, integrity of controllers when conducting a Man in the Middle attack.

Vendors
schneider-electric
Products
modicon m340 bmxp341000 firmware, modicon m340 bmxp341000h firmware, modicon m340 bmxp342000 firmware, modicon m340 bmxp342010 firmware, modicon m340 bmxp3420102 firmware, modicon m340 bmxp3420102cl firmware, modicon m340 bmxp342020 firmware, modicon m340 bmxp342020h firmware, modicon m340 bmxp342030 firmware, modicon m340 bmxp3420302 firmware, modicon m340 bmxp3420302cl firmware, modicon m340 bmxp3420302h firmware
Weakness
CWE-924
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news

No ingested article mentions this CVE yet.