Unauthorized Remote Code Execution in Vulnerable Script by Vendor
CVE-2024-8419

7.5HIGH

Key Information:

Vendor

Ifm Electronic Gmbh

Status
Ifm Smart Plc Ac4xxs Firmware
Vendor
CVE Published:
30 June 2025

What is CVE-2024-8419?

The vulnerability discovered in the affected product allows an unauthorized remote attacker to exploit a script hosted on an endpoint. Due to inadequate authentication measures, attackers can place the system into a fail-safe state via network access, potentially leading to significant disruptions in service and unauthorized control over the system.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

ifm Smart PLC AC4xxS Firmware V4.04

ifm Smart PLC AC4xxS Firmware V6.1.8

References

https://cert.vde.com/en/advisories/VDE-2024-061

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dmytro Kryhin
National Technical University of Ukraine “Igor Sikorsky Kyiv Polytechnic Institute”
JSON
.