High severity · published May 14, 2024
CVE-2024-31484
A vulnerability has been identified in CPC80 Central Processing/Communication (All versions < V16.41), CPCI85 Central Processing/Communication (All versions < V5.30), CPCX26…
7.8
CVSS
0.5%
EPSS
No
On KEV
Description
A vulnerability has been identified in CPC80 Central Processing/Communication (All versions < V16.41), CPCI85 Central Processing/Communication (All versions < V5.30), CPCX26 Central Processing/Communication (All versions < V06.02), ETA4 Ethernet Interface IEC60870-5-104 (All versions < V10.46), ETA5 Ethernet Int. 1x100TX IEC61850 Ed.2 (All versions < V03.27), PCCX26 Ax 1703 PE, Contr, Communication Element (All versions < V06.05). The affected devices contain an improper null termination vulnerability while parsing a specific HTTP header. This could allow an attacker to execute code in the context of the current process or lead to denial of service condition.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 40% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CC
CPC80 Central Processing/Communication · Siemens
before V16.41 · source: vendor
CC
CPCI85 Central Processing/Communication · Siemens
before V5.30 · source: vendor
CC
CPCX26 Central Processing/Communication · Siemens
before V06.02 · source: vendor
EE
ETA4 Ethernet Interface IEC60870-5-104 · Siemens
before V10.46 · source: vendor
EE
ETA5 Ethernet Int. 1x100TX IEC61850 Ed.2 · Siemens
before V03.27 · source: vendor
PA
PCCX26 Ax 1703 PE, Contr, Communication Element · Siemens
before V06.05 · source: vendor
CC
Cpc80 Central Processing\/communication · Siemens
before 16.41 · source: CISA
CC
Cpci85 Central Processing\/communication · Siemens
before 5.30 · source: CISA
Affected product
CC
CPC80 Central Processing/Communication
Siemens
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-31484
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-31484
seclists.org
http://seclists.org/fulldisclosure/2024/Jul/4
cert-portal.siemens.com
https://cert-portal.siemens.com/productcert/html/ssa-620338.html
cert-portal.siemens.com
https://cert-portal.siemens.com/productcert/html/ssa-871704.html
seclists.org
http://seclists.org/fulldisclosure/2024/Nov/18
More from CPC80 Central Processing/Communication
9.0
CVE-2024-3596
RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.