CVE-2024-50310

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Nov 12, 2024
Updated: Nov 13, 2024
CWE ID 863

Summary

CVE-2024-50310 is a newly identified vulnerability affecting Siemens SIMATIC CP 1543-1 V4.0 (6GK7543-1AX10-0XE0) industrial automation controllers. The issue lies in the controllers' authorization handling, which is inadequate. This defect enables unauthenticated remote attackers to penetrate the affected devices and access the underlying filesystem. Versions prior to V4.0.50 are susceptible to this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • SIMATIC CP 1543-1

Affected Vendors

  • Siemens AG

Advisories, Assessments, and Mitigations