CVE-2024-31416

State
Published
Severity
5.6 Medium
Published
Sep 13, 2024
Updated
Aug 26, 2025
Reserved
Apr 3, 2024

Read the record on cve.org

Description

The Eaton Foreseer software provides multiple customizable input fields for the users to configure parameters in the tool like alarms, reports, etc. Some of these input fields were not checking the length and bounds of the entered value. The exploit of this security flaw by a bad actor may result in excessive memory consumption or integer overflow.

Scores

CVSSScoreVectorSource
3.15.6 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:LEaton

Weaknesses

  • CWE-190 Integer Overflow or Wraparound

Affected Products

ProductVersions
ForeseerEaton
  • before 7.8.600Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.