CVE-2024-8935 Auth bypass in Modicon M340 CPU (part numbers BMXP34*)
Man-in-the-middle attacks can bypass authentication in Schneider Electric PLCs, causing denial of service and data compromise.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2024-8935?
CVE-2024-8935 is a high-severity authentication bypass vulnerability in Schneider Electric Modicon M340 CPU (part numbers BMXP34*), published on 13 Nov 2024. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause a denial of service and loss of confidentiality and integrity of controllers when conducting a Man-In-The-Middle attack between the controller and the engineering workstation while a valid user is establishing a communication session. This vulnerability is inherent to Diffie Hellman algorithm which does not protect against Man-In-The-Middle attacks.
Weakness: CWE-290
Which versions are affected by CVE-2024-8935?
How do I fix CVE-2024-8935?
No fix has been published for CVE-2024-8935 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2024-8935 being exploited?
There is no known exploitation of CVE-2024-8935 in the wild and no public exploit code.
Sources
Also known as GHSA-6rch-pvx5-r93q.