CVE-2024-10085

ICS

Overview

Description
-

Social media

Hype score
Not currently trending

  1. ⚠️Vulnerabilidad en productos Schneider Electric ❗CVE-2024-10085 ➡️Más info: https://t.co/zlrcdyXFt8 https://t.co/SI88rhOT0k

    @CERTpy

    16 Oct 2025

    142 Impressions

    0 Retweets

    1 Like

    0 Bookmarks

    0 Replies

    0 Quotes

Related CVEs

  1. OpenPLC_V3 REST API endpoint checks for JWT presence but never verifies the caller's role. Any authenticated user with role=user can delete any other user, including administrators, by specifying their user ID or they can create new accounts with role=admin, escalating to full administrator access.•CVE-2026-35063
  2. A vulnerability exists in EnOcean SmartServer IoT version 4.60.009 and prior, which would allow remote attackers, in the LON IP-852 management messages, to send specially crafted IP-852 messages resulting in a memory leak from the program's memory.•CVE-2026-22885
  3. A vulnerability exists in EnOcean SmartServer IoT version 4.60.009 and prior, which would allow remote attackers, in the LON IP-852 management messages, to send specially crafted IP-852 messages resulting in arbitrary OS command execution on the device.•CVE-2026-20761
  4. An unprotected API endpoint allows an attacker to remotely change the device password without providing authentication.•CVE-2026-24789
  5. Authentication for ZLAN5143D can be bypassed by directly accessing internal URLs.•CVE-2026-25084

References

Sources include official advisories and independent security research.