A vulnerability exists in the RTU500 web server component that can cause a denial of service to the RTU500 CMU application if a specially crafted message sequence is executed on a WebSocket connection.
An attacker must be properly authenticated and the test mode function of RTU500 must be enabled to exploit this vulnerability.
The affected CMU will automatically recover itself if an attacker successfully exploits this vulnerability.
CVSS
No CVSS.
References
Configurations
No configuration.
History
25 Mar 2025, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-03-25 13:15
Updated : 2025-03-25 13:15
NVD link : CVE-2024-10037
Mitre link : CVE-2024-10037
JSON object : View
Products Affected
No product.
CWE
CWE-476
NULL Pointer Dereference