CVE-2024-28878

IOSIX IO-1020 Micro ELD Download of Code Without Integrity Check

State: Published
Severity: 9.6 Critical
Published: Apr 12, 2024
Updated: Aug 26, 2024
Reserved: Mar 28, 2024

Description

IO-1020 Micro ELD downloads source code or an executable from an adjacent location and executes the code without sufficiently verifying the origin or integrity of the code.

Scores

CVSS	Score	Vector	Source
3.1	9.6 Critical	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H	icscert

Weaknesses

CWE-494 Download of Code Without Integrity Check

Affected Products

Product	Versions
IO-1020 Micro ELDIOSiX	360 and earlierAffected

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-093-01

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.