Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-45368

Опубликовано: 13 сент. 2024
Источник: nvd
CVSS3: 8.8
EPSS Низкий

Описание

The H2-DM1E PLC's authentication protocol appears to utilize either a custom encoding scheme or a challenge-response protocol. However, there's an observed anomaly in the H2-DM1E PLC's protocol execution, namely its acceptance of multiple distinct packets as valid authentication responses. This behavior deviates from standard security practices where a single, specific response or encoding pattern is expected for successful authentication.

EPSS

Процентиль: 35%
0.00145
Низкий

8.8 High

CVSS3

Дефекты

CWE-384

Связанные уязвимости

CVSS3: 8.8
github
больше 1 года назад

The H2-DM1E PLC's authentication protocol appears to utilize either a custom encoding scheme or a challenge-response protocol. However, there's an observed anomaly in the H2-DM1E PLC's protocol execution, namely its acceptance of multiple distinct packets as valid authentication responses. This behavior deviates from standard security practices where a single, specific response or encoding pattern is expected for successful authentication.

EPSS

Процентиль: 35%
0.00145
Низкий

8.8 High

CVSS3

Дефекты

CWE-384