CVEvulnerability

CVE-2023-6408

8.1 HIGH Published 2024-02-14 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-02-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.1 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
8.1 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-924

Description

CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause a denial of service and loss of confidentiality, integrity of controllers when conducting a Man in the Middle attack.

Affected configurations

• schneider-electric modicon m340 bmxp341000 firmware (< 3.60) • schneider-electric modicon m340 bmxp341000h firmware (< 3.60) • schneider-electric modicon m340 bmxp342000 firmware (< 3.60) • schneider-electric modicon m340 bmxp342010 firmware (< 3.60) • schneider-electric modicon m340 bmxp3420102 firmware (< 3.60) • schneider-electric modicon m340 bmxp3420102cl firmware (< 3.60) • schneider-electric modicon m340 bmxp342020 firmware (< 3.60) • schneider-electric modicon m340 bmxp342020h firmware (< 3.60) • schneider-electric modicon m340 bmxp342030 firmware (< 3.60) • schneider-electric modicon m340 bmxp3420302 firmware (< 3.60) • schneider-electric modicon m340 bmxp3420302cl firmware (< 3.60) • schneider-electric modicon m340 bmxp3420302h firmware (< 3.60) • schneider-electric modicon m340 bmxp342030h firmware (< 3.60) • schneider-electric modicon m580 bmep581020 firmware (< 4.20) • schneider-electric modicon m580 bmep581020h firmware (< 4.20) • schneider-electric modicon m580 bmep582020 firmware (< 4.20) • schneider-electric modicon m580 bmep582020h firmware (< 4.20) • schneider-electric modicon m580 bmep582040 firmware (< 4.20) • schneider-electric modicon m580 bmep582040h firmware (< 4.20) • schneider-electric modicon m580 bmep582040s firmware (< 4.21) • schneider-electric modicon m580 bmep583020 firmware (< 4.20) • schneider-electric modicon m580 bmep583040 firmware (< 4.20) • schneider-electric modicon m580 bmep584040 firmware (< 4.20) • schneider-electric modicon m580 bmep584020 firmware (< 4.20) • schneider-electric modicon m580 bmep584040s firmware (< 4.21) • schneider-electric modicon m580 bmep585040 firmware (< 4.20) • schneider-electric modicon m580 bmep585040c firmware (< 4.20) • schneider-electric modicon m580 bmep586040 firmware (< 4.20) • schneider-electric modicon m580 bmep586040c firmware (< 4.20) • schneider-electric modicon m580 bmeh582040 firmware (< 4.20) • schneider-electric modicon m580 bmeh582040c firmware (< 4.20) • schneider-electric modicon m580 bmeh584040 firmware (< 4.20) • schneider-electric modicon m580 bmeh582040s firmware (< 4.21) • schneider-electric modicon m580 bmeh584040c firmware (< 4.20) • schneider-electric modicon m580 bmeh584040s firmware (< 4.21) • schneider-electric modicon m580 bmeh586040 firmware (< 4.20) • schneider-electric modicon m580 bmeh586040c firmware (< 4.20) • schneider-electric modicon m580 bmeh586040s firmware (< 4.21) • schneider-electric modicon mc80 bmkc8020301 firmware • schneider-electric modicon mc80 bmkc8020310 firmware • schneider-electric modicon mc80 bmkc8030311 • schneider-electric modicon momentum 171cbu78090 firmware • schneider-electric modicon momentum 171cbu98090 firmware • schneider-electric modicon momentum 171cbu98091 firmware • schneider-electric ecostruxure control expert (< 16.0) • schneider-electric ecostruxure process expert (< 2023)

Related

Weakness · CWE (1)

  • CWE-924 Improper Enforcement of Message Integrity During Transmission in a Communication Channel weakness

References