CVE-2024-8933CWE-924

CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause retrieval of password…

High · published November 13, 2024

CVSS v4.0
7.5
EPSS
0%
Percentile
22.0
In the wild
Unconfirmed
What it is

CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel

vulnerability exists that could cause retrieval of password hash that could lead to denial of service and loss of

confidentiality and integrity of controllers. To be successful, the attacker needs to inject themself inside the

logical network while a valid user uploads or downloads a project file into the controller.

The record
Technical detail
CVSS v4.0
7.5 · HIGH
Vector
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00304 · 22.0th percentile
Weakness
CWE-924 · Improper Enforcement of Message Integrity During Transmission in a Communication Channel
Published
2024-11-13T04:06Z
EPSS history
Timeline
  • 13 NOV 04:06Z
    CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause retrieval of password…
    cvelistv5