CVE-2024-12399

State: Published
Severity: 6.1 Medium
Published: Jan 17, 2025
Updated: Sep 9, 2025
Reserved: Dec 10, 2024

Description

CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause partial loss of confidentiality, loss of integrity and availability of the HMI when attacker performs man in the middle attack by intercepting the communication.

Scores

CVSS	Score	Vector	Source
4.0	6.1 Medium	CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N	schneider
3.1	7.1 High	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H	schneider

Weaknesses

CWE-924 Improper Enforcement of Message Integrity During Transmission in a Communication Channel

Affected Products

Product	Versions
Pro-face GP-Pro EXSchneider Electric	all version to before v5.00.100Affected
Pro-face Remote HMISchneider Electric	all versions to before v1.70.000Affected

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-014-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-014-02.pdf

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.