CVE-2024-41176

Katalog CVE

CVSS 7.3 · High EPSS 0,27%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada beckhoff mdp package, beckhoff twincat/bsd. Skor CVSS 3.1 7.3 (High) menurut cert.vde.com.

Deskripsi (NVD)

The MPD package included in TwinCAT/BSD allows an authenticated, low-privileged local attacker to induce a Denial-of-Service (DoS) condition on the daemon and execute code in the context of user “root” via a crafted HTTP request.

Rincian

Terbit di NVD

27 Agustus 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.3 (High), sumber cert.vde.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

EPSS (30 hari)

0,27% peluang dieksploitasi; lebih tinggi dari 17,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://cert.vde.com/en/advisories/VDE-2024-050 mitigasi · advisory pihak ketiga