NetSight
IP …
high8.1

CVE-2023-6408

CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause a denial of service and…

Impact

CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause a denial of service and loss of confidentiality, integrity of controllers when conducting a Man in the Middle attack.

Affected products

VendorProductAffected versions
Schneider-ElectricModicon M340 Bmxp341000 Firmware
before 3.60
Schneider-ElectricModicon M340 Bmxp341000h Firmware
before 3.60
Schneider-ElectricModicon M340 Bmxp342000 Firmware
before 3.60
Schneider-ElectricModicon M340 Bmxp342010 Firmware
before 3.60
Schneider-ElectricModicon M340 Bmxp3420102 Firmware
before 3.60
Schneider-ElectricModicon M340 Bmxp3420102cl Firmware
before 3.60
Schneider-ElectricModicon M340 Bmxp342020 Firmware
before 3.60
Schneider-ElectricModicon M340 Bmxp342020h Firmware
before 3.60
Schneider-ElectricModicon M340 Bmxp342030 Firmware
before 3.60
Schneider-ElectricModicon M340 Bmxp3420302 Firmware
before 3.60
Schneider-ElectricModicon M340 Bmxp3420302cl Firmware
before 3.60
Schneider-ElectricModicon M340 Bmxp3420302h Firmware
before 3.60

Weakness classification

CWE-924

References