CVE-2024-41975
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Mar 18, 2025
CWE ID 1188
Summary
CVE-2024-41975 is a newly disclosed vulnerability that allows unauthenticated attackers to obtain limited information about a Programmable Logic Controller (PLC) network. However, user management features of the PLCs impede the attacker's ability to access the PLCs directly, keeping them from making unauthorized changes or causing significant harm to the system. The extent of the information that can be gathered by the attacker and potential implications for industrial systems require further investigation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.