CVE-2024-12650

published 2025-03-05

CVE-2024-12650: An attacker with low privileges can manipulate the requested memory size, causing the application to use an invalid memory area. This could lead to a crash of…

medium 5.4 CVSS 3.1

AV N AC L PR L UI N S U C N I L A L

An attacker with low privileges can manipulate the requested memory size, causing the application to use an invalid memory area. This could lead to a crash of the application but it does not affected other applications.

Affected

14 ranges

Vendor	Product	Version range	Fixed in
wago	cc100_0751-9x01	< 04.07.01	04.07.01
wago	edge_controller_0752-8303_8000-0002	< 04.07.01	04.07.01
wago	pfc100_g1_0750-810x_xxxx-xxxx	< 3.10.11	3.10.11
wago	pfc100_g1_0750-810x_xxxx-xxxx	< 04.07.01	04.07.01
wago	pfc100_g2_0750-811x-xxxx-xxxx	< 04.07.01	04.07.01
wago	pfc200_g1_750-820x-xxx-xxx	< 3.10.11	3.10.11
wago	pfc200_g1_750-820x-xxx-xxx	< 04.07.01	04.07.01
wago	pfc200_g2_750-821x-xxx-xxx	< 04.07.01	04.07.01
wago	tp600_0762-420x_8000-000x	< 04.07.01	04.07.01
wago	tp600_0762-430x_8000-000x	< 04.07.01	04.07.01
wago	tp600_0762-520x_8000-000x	< 04.07.01	04.07.01
wago	tp600_0762-530x_8000-000x	< 04.07.01	04.07.01
wago	tp600_0762-620x_8000-000x	< 04.07.01	04.07.01
wago	tp600_0762-630x_8000-000x	< 04.07.01	04.07.01

CWE-252