ifm: Improper Access Control vulnerability
A vulnerability has been disclosed in PLC ifm AC4xxS that allows an attacker to trigger the safety state with the help of a specially crafted html request. This leads to a loss of availability.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-8419US | —OT erhöht | — | ||
The endpoint hosts a script that allows an unauthorized remote attacker to put the system in a fail-safe state over the network due to missing authentication. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (10)
- MitigationFirmware 4.04<4.3.17 installed on ifm Smart PLC AC402s
When using automation components, make sure that no unauthorized access can take place. In addition, measures should be taken to ensure that the components do not have direct access to Internet resources and that they cannot be accessed from insecure networks. Use available security measures such as authentication and authorization groups. PLC with firmware V6.1.8 http interface can be disabled.
- MitigationFirmware 4.04<4.3.17 installed on ifm Smart PLC AC422s
When using automation components, make sure that no unauthorized access can take place. In addition, measures should be taken to ensure that the components do not have direct access to Internet resources and that they cannot be accessed from insecure networks. Use available security measures such as authentication and authorization groups. PLC with firmware V6.1.8 http interface can be disabled.
- MitigationFirmware 4.04<4.3.17 installed on ifm Smart PLC AC424s
When using automation components, make sure that no unauthorized access can take place. In addition, measures should be taken to ensure that the components do not have direct access to Internet resources and that they cannot be accessed from insecure networks. Use available security measures such as authentication and authorization groups. PLC with firmware V6.1.8 http interface can be disabled.
- MitigationFirmware 4.04<4.3.17 installed on ifm Smart PLC AC432s
When using automation components, make sure that no unauthorized access can take place. In addition, measures should be taken to ensure that the components do not have direct access to Internet resources and that they cannot be accessed from insecure networks. Use available security measures such as authentication and authorization groups. PLC with firmware V6.1.8 http interface can be disabled.
- MitigationFirmware 4.04<4.3.17 installed on ifm Smart PLC AC434s
When using automation components, make sure that no unauthorized access can take place. In addition, measures should be taken to ensure that the components do not have direct access to Internet resources and that they cannot be accessed from insecure networks. Use available security measures such as authentication and authorization groups. PLC with firmware V6.1.8 http interface can be disabled.
- MitigationFirmware 6.1.8 installed on ifm Smart PLC AC402s
When using automation components, make sure that no unauthorized access can take place. In addition, measures should be taken to ensure that the components do not have direct access to Internet resources and that they cannot be accessed from insecure networks. Use available security measures such as authentication and authorization groups. PLC with firmware V6.1.8 http interface can be disabled.
- MitigationFirmware 6.1.8 installed on ifm Smart PLC AC422s
When using automation components, make sure that no unauthorized access can take place. In addition, measures should be taken to ensure that the components do not have direct access to Internet resources and that they cannot be accessed from insecure networks. Use available security measures such as authentication and authorization groups. PLC with firmware V6.1.8 http interface can be disabled.
- MitigationFirmware 6.1.8 installed on ifm Smart PLC AC424s
When using automation components, make sure that no unauthorized access can take place. In addition, measures should be taken to ensure that the components do not have direct access to Internet resources and that they cannot be accessed from insecure networks. Use available security measures such as authentication and authorization groups. PLC with firmware V6.1.8 http interface can be disabled.
- MitigationFirmware 6.1.8 installed on ifm Smart PLC AC432s
When using automation components, make sure that no unauthorized access can take place. In addition, measures should be taken to ensure that the components do not have direct access to Internet resources and that they cannot be accessed from insecure networks. Use available security measures such as authentication and authorization groups. PLC with firmware V6.1.8 http interface can be disabled.
- MitigationFirmware 6.1.8 installed on ifm Smart PLC AC434s
When using automation components, make sure that no unauthorized access can take place. In addition, measures should be taken to ensure that the components do not have direct access to Internet resources and that they cannot be accessed from insecure networks. Use available security measures such as authentication and authorization groups. PLC with firmware V6.1.8 http interface can be disabled.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan