Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7jvg-x7c5-xw29

Опубликовано: 15 янв. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

The XINJE XL5E-16T and XD5E-24R-E programmable logic controllers V3.5.3b-V3.7.2a have a vulnerability in handling Modbus messages. When a TCP connection is established with the above series of controllers within a local area network (LAN), sending a specific Modbus message to the controller can cause the PLC to crash, interrupting the normal operation of the programs running in the PLC. This results in the ERR indicator light turning on and the RUN indicator light turning off.

The XINJE XL5E-16T and XD5E-24R-E programmable logic controllers V3.5.3b-V3.7.2a have a vulnerability in handling Modbus messages. When a TCP connection is established with the above series of controllers within a local area network (LAN), sending a specific Modbus message to the controller can cause the PLC to crash, interrupting the normal operation of the programs running in the PLC. This results in the ERR indicator light turning on and the RUN indicator light turning off.

EPSS

Процентиль: 53%
0.003
Низкий

7.5 High

CVSS3

Дефекты

CWE-703
CWE-94

Связанные уязвимости

CVSS3: 7.5
nvd
около 1 года назад

The XINJE XL5E-16T and XD5E-24R-E programmable logic controllers V3.5.3b-V3.7.2a have a vulnerability in handling Modbus messages. When a TCP connection is established with the above series of controllers within a local area network (LAN), sending a specific Modbus message to the controller can cause the PLC to crash, interrupting the normal operation of the programs running in the PLC. This results in the ERR indicator light turning on and the RUN indicator light turning off.

EPSS

Процентиль: 53%
0.003
Низкий

7.5 High

CVSS3

Дефекты

CWE-703
CWE-94