CVE-2024-10498
- State
- Published
- Severity
- 6.9 Medium
- Published
- Jan 17, 2025
- Updated
- Feb 12, 2025
- Reserved
- Oct 29, 2024
Description
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could allow an unauthorized attacker to modify configuration values outside of the normal range when the attacker sends specific Modbus write packets to the device which could result in invalid data or loss of web interface functionality.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.9 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N | schneider |
| 3.1 | 6.5 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L | schneider |
Weaknesses
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected Products
| Product | Versions |
|---|---|
PowerLogic HDPM6000Schneider Electric |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.