Improper Memory Buffer Restrictions in Schneider Electric Modicon Devices

CVE-2024-10498

What is CVE-2024-10498?

A vulnerability exists in Schneider Electric's Modicon PLCs that could be exploited by attackers through specific Modbus write packets. This flaw allows unauthorized modifications of configuration parameters beyond typical operational limits, potentially leading to invalid data processing or impaired access to the web interface. Organizations using affected Modicon devices should ensure proper network segmentation and monitoring to mitigate the risks associated with this vulnerability.

References