Unauthorized Remote Code Execution in Vulnerable Script by Vendor
CVE-2024-8419

7.5HIGH

Key Information:

Vendor

Ifm Electronic Gmbh

Status
Ifm Smart Plc Ac4xxs Firmware
Vendor
CVE Published:
30 June 2025

What is CVE-2024-8419?

The vulnerability discovered in the affected product allows an unauthorized remote attacker to exploit a script hosted on an endpoint. Due to inadequate authentication measures, attackers can place the system into a fail-safe state via network access, potentially leading to significant disruptions in service and unauthorized control over the system.

Affected Version(s)

ifm Smart PLC AC4xxS Firmware V4.04

ifm Smart PLC AC4xxS Firmware V6.1.8

References

https://cert.vde.com/en/advisories/VDE-2024-061

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dmytro Kryhin
National Technical University of Ukraine “Igor Sikorsky Kyiv Polytechnic Institute”
.
CVE-2024-8419 : Unauthorized Remote Code Execution in Vulnerable Script by Vendor