Lucene search

SchneiderVULNRICHMENT:CVE-2024-5557

HistoryJun 12, 2024 - 4:28 p.m.

CVE-2024-5557

2024-06-1216:28:56

CWE-532

schneider

github.com

cve-2024-5557

cwe-532

snmp credentials

exposure

attacker access

CVSS3

4.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

6.8

Confidence

Low

EPSS

Percentile

16.2%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

CWE-532: Insertion of Sensitive Information into Log File vulnerability exists that could cause
exposure of SNMP credentials when an attacker has access to the controller logs.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:h:schneider-electric:spacelogic_as-b:*:*:*:*:*:*:*:*"
    ],
    "vendor": "schneider-electric",
    "product": "spacelogic_as-b",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "5.0.3"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:schneider-electric:spacelogic_as-p:*:*:*:*:*:*:*:*"
    ],
    "vendor": "schneider-electric",
    "product": "spacelogic_as-p",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "5.0.3"
      }
    ],
    "defaultStatus": "unknown"
  }
]

References

download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-163-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-163-04.pdf

CVSS3

4.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

6.8

Confidence

Low

EPSS

Percentile

16.2%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Related for VULNRICHMENT:CVE-2024-5557