CVE-2024-8419

highpriority · track · 0OT risk · elevatedEPSS 0.005 · 41 %ileDEEU
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
0.48% (41st) EPSS
CVSS 7.5 · high
Is it mine?
20 products
Check your exposure
Who says so?
3 sources
cnnvd · enisa_euvd · ifm_psirt

EPSS · scored 2026-10-27

The endpoint hosts a script that allows an unauthorized remote attacker to put the system in a fail-safe state over the network due to missing authentication.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

No vendor fix yet; a mitigation is available.

  • MitigationFirmware 4.04<4.3.17 installed on ifm Smart PLC AC402sifm_psirt

    When using automation components, make sure that no unauthorized access can take place. In addition, measures should be taken to ensure that the components do not have direct access to Internet resources and that they cannot be accessed from insecure networks. Use available security measures such as authentication and authorization groups. PLC with firmware V6.1.8 http interface can be disabled.

  • MitigationFirmware 4.04<4.3.17 installed on ifm Smart PLC AC422sifm_psirt

    When using automation components, make sure that no unauthorized access can take place. In addition, measures should be taken to ensure that the components do not have direct access to Internet resources and that they cannot be accessed from insecure networks. Use available security measures such as authentication and authorization groups. PLC with firmware V6.1.8 http interface can be disabled.

  • MitigationFirmware 4.04<4.3.17 installed on ifm Smart PLC AC424sifm_psirt

    When using automation components, make sure that no unauthorized access can take place. In addition, measures should be taken to ensure that the components do not have direct access to Internet resources and that they cannot be accessed from insecure networks. Use available security measures such as authentication and authorization groups. PLC with firmware V6.1.8 http interface can be disabled.

  • MitigationFirmware 4.04<4.3.17 installed on ifm Smart PLC AC432sifm_psirt

    When using automation components, make sure that no unauthorized access can take place. In addition, measures should be taken to ensure that the components do not have direct access to Internet resources and that they cannot be accessed from insecure networks. Use available security measures such as authentication and authorization groups. PLC with firmware V6.1.8 http interface can be disabled.

  • MitigationFirmware 4.04<4.3.17 installed on ifm Smart PLC AC434sifm_psirt

    When using automation components, make sure that no unauthorized access can take place. In addition, measures should be taken to ensure that the components do not have direct access to Internet resources and that they cannot be accessed from insecure networks. Use available security measures such as authentication and authorization groups. PLC with firmware V6.1.8 http interface can be disabled.

  • MitigationFirmware 6.1.8 installed on ifm Smart PLC AC402sifm_psirt

    When using automation components, make sure that no unauthorized access can take place. In addition, measures should be taken to ensure that the components do not have direct access to Internet resources and that they cannot be accessed from insecure networks. Use available security measures such as authentication and authorization groups. PLC with firmware V6.1.8 http interface can be disabled.

  • MitigationFirmware 6.1.8 installed on ifm Smart PLC AC422sifm_psirt

    When using automation components, make sure that no unauthorized access can take place. In addition, measures should be taken to ensure that the components do not have direct access to Internet resources and that they cannot be accessed from insecure networks. Use available security measures such as authentication and authorization groups. PLC with firmware V6.1.8 http interface can be disabled.

  • MitigationFirmware 6.1.8 installed on ifm Smart PLC AC424sifm_psirt

    When using automation components, make sure that no unauthorized access can take place. In addition, measures should be taken to ensure that the components do not have direct access to Internet resources and that they cannot be accessed from insecure networks. Use available security measures such as authentication and authorization groups. PLC with firmware V6.1.8 http interface can be disabled.

  • MitigationFirmware 6.1.8 installed on ifm Smart PLC AC432sifm_psirt

    When using automation components, make sure that no unauthorized access can take place. In addition, measures should be taken to ensure that the components do not have direct access to Internet resources and that they cannot be accessed from insecure networks. Use available security measures such as authentication and authorization groups. PLC with firmware V6.1.8 http interface can be disabled.

  • MitigationFirmware 6.1.8 installed on ifm Smart PLC AC434sifm_psirt

    When using automation components, make sure that no unauthorized access can take place. In addition, measures should be taken to ensure that the components do not have direct access to Internet resources and that they cannot be accessed from insecure networks. Use available security measures such as authentication and authorization groups. PLC with firmware V6.1.8 http interface can be disabled.

02

cvss

Technical severity, 0–10. One row per scoring source.

7.5
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.9–7.5

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · ENISA EU
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · info@cert.vde.comexploitability 3.9 · impact 3.6
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · ifm PSIRT DE
v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)
03

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS
04

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-306USCWE-306US
05

affected products (20)

Products and version ranges known to be affected.

06

advisories (1)

Vendor and ecosystem advisories describing this.

  • VDE-2024-061ifm: Improper Access Control vulnerability2025-06-30csaf · ifm_psirtDE

    A vulnerability has been disclosed in PLC ifm AC4xxS that allows an attacker to trigger the safety state with the help of a specially crafted html request. This leads to a loss of availability.

07

also known as (3)

Other names and identifiers for this entity.

08

sources

Which sources assert this record, and when.

cnnvdenisa_euvdifm_psirtNVDCVE.orgMITRE
published 2025-06-30modified 2026-06-17
09

references (5)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan