Is there a patch available for CVE-2024-9409?

Yes, a patch is available for CVE-2024-9409. Update the affected software to the latest version immediately.

Powerlogic Pm5341 Firmware CVE-2024-9409

Q: What is the CVSS score of CVE-2024-9409?

CVE-2024-9409 has a CVSS 4.0 base score of 8.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.8%.

HIGH

Uncontrolled Resource Consumption (CWE-400)

2024-11-13 cybersecurity@se.com

Denial Of Service Powerlogic Pm5341 Firmware Powerlogic Pm5340 Firmware Powerlogic Pm5320 Firmware

8.7

CVSS 4.0 · Vendor: se

Severity by source

Vendor (se) PRIMARY

8.7 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (se) · only source for this CVE.

CVSS VectorVendor: se

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

CVE Published

Nov 13, 2024 - 05:15 cve.org

HIGH 8.7

DescriptionCVE.org

CWE-400: An Uncontrolled Resource Consumption vulnerability exists that could cause the device to become unresponsive resulting in communication loss when a large amount of IGMP packets is present in the network.

AnalysisAI

unresponsive resulting in communication loss when a large amount of IGMP packets is present in the network. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Technical ContextAI

This vulnerability is classified as Uncontrolled Resource Consumption (CWE-400), which allows attackers to cause denial of service by exhausting system resources. unresponsive resulting in communication loss when a large amount of IGMP packets is present in the network. Affected products include: Schneider-Electric Powerlogic Pm5341 Firmware, Schneider-Electric Powerlogic Pm5340 Firmware, Schneider-Electric Powerlogic Pm5320 Firmware.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Implement rate limiting, set resource quotas, validate input sizes, use timeouts.