Log in / Sign up

Vulnerability details

CVE-2024-8419

ifm electronic ifm Smart PLC AC402sifm electronic ifm Smart PLC AC422sifm electronic ifm Smart PLC AC424sifm electronic ifm Smart PLC AC432sifm electronic ifm Smart PLC AC434s

Improper Access Control vulnerability in AC4xxS devices

CVSS 3.1
7.5High

Official description

The endpoint hosts a script that allows an unauthorized remote attacker to put the system in a fail-safe state over the network due to missing authentication.

CVSS scores

ScoreVersionSourceVector
7.5High 3.1 CVEProject cvelistV5 (CNA) (CERTVDE) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

VendorProductVersionsSource
ifm electronic GmbH ifm Smart PLC AC402s 6.1.8 CVEProject cvelistV5 (CNA)
ifm electronic GmbH ifm Smart PLC AC402s 4.04 ≤ v < 4.3.17 CVEProject cvelistV5 (CNA)
ifm electronic GmbH ifm Smart PLC AC422s 6.1.8 CVEProject cvelistV5 (CNA)
ifm electronic GmbH ifm Smart PLC AC422s 4.04 ≤ v < 4.3.17 CVEProject cvelistV5 (CNA)
ifm electronic GmbH ifm Smart PLC AC424s 6.1.8 CVEProject cvelistV5 (CNA)
ifm electronic GmbH ifm Smart PLC AC424s 4.04 ≤ v < 4.3.17 CVEProject cvelistV5 (CNA)
ifm electronic GmbH ifm Smart PLC AC432s 6.1.8 CVEProject cvelistV5 (CNA)
ifm electronic GmbH ifm Smart PLC AC432s 4.04 ≤ v < 4.3.17 CVEProject cvelistV5 (CNA)
ifm electronic GmbH ifm Smart PLC AC434s 6.1.8 CVEProject cvelistV5 (CNA)
ifm electronic GmbH ifm Smart PLC AC434s 4.04 ≤ v < 4.3.17 CVEProject cvelistV5 (CNA)

References and advisories

1
Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published
2025-06-30
Last updated
2026-02-16
State
Published
Assigner (CNA)
CERTVDE

Exploit prediction (EPSS)

0.48%
Probability of exploitation in 30 days
41.7%
Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable
Yes
Exploitation
None
Technical impact
Partial

Weaknesses (CWE)

  • CWE-306
    Missing Authentication for Critical Function