PT-2024-17393 · Schneider Electric · Schneider Electric

CVE-2024-11999

·

Published

2024-12-17

·

Updated

2024-12-18

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Schneider Electric products (affected versions not specified)
Description A Use of Unmaintained Third-Party Components issue exists that could allow complete control of the device when an authenticated user installs malicious code into an HMI product.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2024-11999

Affected Products

Schneider Electric