2 lines
4.8 KiB
JSON
2 lines
4.8 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Modicon M340","vendor":"Schneider Electric","versions":[{"status":"affected","version":"All versions"}]},{"defaultStatus":"unaffected","product":"Network module, Modicon M340, Modbus/TCP BMXNOE0100","vendor":"Schneider Electric","versions":[{"status":"affected","version":"All versions"}]},{"defaultStatus":"unaffected","product":"Network module, Modicon M340, Ethernet TCP/IP BMXNOE0110","vendor":"Schneider Electric","versions":[{"status":"affected","version":"All Versions"}]}],"source":"cybersecurity@se.com"},{"affectedData":[{"cpes":["cpe:2.3:o:schneider-electric:modicom_m340_firmware:-:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"modicom_m340_firmware","vendor":"schneider-electric","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:h:schneider-electric:modicom_m340:-:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"modicom_m340","vendor":"schneider-electric","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:schneider-electric:modicon_m340_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"05CBA9AD-ECB7-453F-8551-DD176FDE8043","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:schneider-electric:modicon_m340:*:*:*:*:*:*:*:*","matchCriteriaId":"874705E0-7A67-4B32-A282-87602D4328AC","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:schneider-electric:bmxnoe0100_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"6E00817A-E140-418F-93AB-A9B516F090A7","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:schneider-electric:bmxnoe0100:*:*:*:*:*:*:*:*","matchCriteriaId":"58CD02DB-E0D4-4F78-9743-F455A9E47358","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:schneider-electric:bmxnoe0110_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"F2F33A35-37ED-41AD-94A2-34FEA8E7259B","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:schneider-electric:bmxnoe0110:*:*:*:*:*:*:*:*","matchCriteriaId":"3CCF4860-AE12-4750-8F4A-39D9580A2276","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"CWE-552: Files or Directories Accessible to External Parties vulnerability exists which may\nprevent user to update the device firmware and prevent proper behavior of the webserver when\nspecific files or directories are removed from the filesystem."},{"lang":"es","value":"CWE-552: Existe una vulnerabilidad de archivos o directorios accesibles a terceros que puede impedir que el usuario actualice el firmware del dispositivo e impedir el comportamiento adecuado del servidor web cuando se eliminan archivos o directorios específicos del sistema de archivos."}],"id":"CVE-2024-5056","lastModified":"2026-06-17T08:14:59.890","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","version":"3.1"},"exploitabilityScore":3.9,"impactScore":2.5,"source":"cybersecurity@se.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","version":"3.1"},"exploitabilityScore":3.9,"impactScore":2.5,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-5056","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-06-12T14:14:02.243238Z","version":"2.0.3"}}]},"published":"2024-06-12T12:15:10.233","references":[{"source":"cybersecurity@se.com","tags":["Vendor Advisory"],"url":"https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-163-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-163-01.pdf"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-163-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-163-01.pdf"}],"sourceIdentifier":"cybersecurity@se.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-552"}],"source":"cybersecurity@se.com","type":"Secondary"}]}
|