← CVE Intelligence

CVE-2024-28750

ifm: Deleting function in Smart PLC allows command injections PUBLISHED

Description (CNA)

A remote attacker with high privileges may use a deleting file function to inject OS commands.

Affected (CNA)

Vendor / productVersions
ifm / Smart PLC AC14xx Firmwareaffected 0 through V4.3.17
ifm / Smart PLC AC4xxS Firmwareaffected 0 through V4.3.17

CWE

CWE-78

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.