CVE-2024-41974

published 2024-11-18

CVE-2024-41974: A low privileged remote attacker may modify the BACNet service properties due to incorrect permission assignment for critical resources which may lead to a DoS…

Priority P3 36 high 7.1 CVSS 3.1

AV N AC L PR L UI N S U C N I L A H

A low privileged remote attacker may modify the BACNet service properties due to incorrect permission assignment for critical resources which may lead to a DoS limited to BACNet communication.

Affected

12 ranges

Vendor	Product	Version range	Fixed in
wago	cc100_0751-9x01	0.0.0 – 4.5.10 (FW27)	—
wago	cc100_0751_9x01	0.0.0 – 04.03.03 (72)	—
wago	edge_controller_0752-8303_8000-0002	0.0.0 – 4.5.10 (FW27)	—
wago	pfc100_g2_0750-811x-xxxx-xxxx	0.0.0 – 4.5.10 (FW27)	—
wago	pfc200_g2_0750-821x_xxx-xxx	0.0.0 – 04.04.03 (70)	—
wago	pfc200_g2_750-821x-xxx-xxx	0.0.0 – 4.5.10 (FW27)	—
wago	tp600_0762-420x_8000-000x	0.0.0 – 4.5.10 (FW27)	—
wago	tp600_0762-430x_8000-000x	0.0.0 – 4.5.10 (FW27)	—
wago	tp600_0762-520x_8000-000x	0.0.0 – 4.5.10 (FW27)	—
wago	tp600_0762-530x_8000-000x	0.0.0 – 4.5.10 (FW27)	—
wago	tp600_0762-620x_8000-000x	0.0.0 – 4.5.10 (FW27)	—
wago	tp600_0762-630x_8000-000x	0.0.0 – 4.5.10 (FW27)	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-732