CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
CVE-2024-12142: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause information disclosure of restricted web...
8.8
CVSS
Description
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could
cause information disclosure of restricted web page, modification of web page and denial of
service when specific web pages are modified and restricted functions are invoked.
Classification
CVE ID: CVE-2024-12142
CVSS Base Severity: HIGH
CVSS Base Score: 8.8
Affected Products
Vendor: Schneider Electric
Product: Modicon M340 processors (part numbers BMXP34*)
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.66% (scored less or equal to compared to others)
EPSS Date: 2025-02-15 (when was this score calculated)