CVSS 4.0
6.1 mediumCVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:H/VA:H/SC:N/SI:N/SA:NCVE-2024-12399
Medium (6.1). EPSS 0.2% chance of exploitation in the next 30 days.
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability
exists that could cause partial loss of confidentiality, loss of integrity and availability of the HMI when attacker performs
man in the middle attack by intercepting the communication.
Severity
CVSS 3.1
7.1 highCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 6% of CVEs (scores of 2026-10-31)
- CWE
- CWE-924
- Published
- Modified
- Record from
- the NVD, synced