2024-12-08 03:06:42 +00:00

95 lines
2.6 KiB
JSON

{
"id": "CVE-2024-41175",
"sourceIdentifier": "info@cert.vde.com",
"published": "2024-08-27T08:15:05.080",
"lastModified": "2024-09-12T14:25:10.307",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The IPC-Diagnostics package included in TwinCAT/BSD is vulnerable to a local denial-of-service attack by a low privileged attacker."
},
{
"lang": "es",
"value": "El paquete IPC-Diagnostics incluido en TwinCAT/BSD es vulnerable a un ataque de denegaci\u00f3n de servicio local por parte de un atacante con pocos privilegios."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "info@cert.vde.com",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "info@cert.vde.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-770"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:beckhoff:ipc_diagnostics_package:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2.0.0.1",
"matchCriteriaId": "18F97E31-D97A-40A3-BD8A-4EBB91374378"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:beckhoff:twincat\\/bsd:*:*:*:*:*:*:*:*",
"versionEndExcluding": "14.1.2.0",
"matchCriteriaId": "A311642D-9723-4D61-8979-20A1F28EB17E"
}
]
}
]
}
],
"references": [
{
"url": "https://cert.vde.com/en/advisories/VDE-2024-049/",
"source": "info@cert.vde.com",
"tags": [
"Mitigation",
"Third Party Advisory"
]
},
{
"url": "https://infosys.beckhoff.com/content/1033/twincat_bsd/11780818443.html?id=4222392218353411614",
"source": "info@cert.vde.com",
"tags": [
"Vendor Advisory"
]
}
]
}