CVE-2024-8419 — Improper Access Control vulnerability in AC4xxS devices

Description (CNA)

The endpoint hosts a script that allows an unauthorized remote attacker to put the system in a fail-safe state over the network due to missing authentication.

Affected (CNA)

Vendor / product	Versions
ifm electronic GmbH / ifm Smart PLC AC402s	affected 4.04 before 4.3.17; affected 6.1.8
ifm electronic GmbH / ifm Smart PLC AC422s	affected 4.04 before 4.3.17; affected 6.1.8
ifm electronic GmbH / ifm Smart PLC AC424s	affected 4.04 before 4.3.17; affected 6.1.8
ifm electronic GmbH / ifm Smart PLC AC432s	affected 4.04 before 4.3.17; affected 6.1.8
ifm electronic GmbH / ifm Smart PLC AC434s	affected 4.04 before 4.3.17; affected 6.1.8

CWE

CWE-306

References

https://cert.vde.com/en/advisories/VDE-2024-061

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.