cve/2024/CVE-2024-2617.md

### [CVE-2024-2617](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2617)
![](https://img.shields.io/static/v1?label=Product&message=RTU500%20series%20CMU%20firmware&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=13.2.1%3C%3D%2013.2.7%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

A vulnerability exists in the RTU500 that allows for authenticated and authorized users to bypass secure update. If amalicious actor successfully exploits this vulnerability, theycould use it to update the RTU500 with unsigned firmware.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/fkie-cad/nvd-json-data-feeds