PT-2024-10223 · Pro Face · Pro-Face Remote Hmi+1

Published

2024-12-10

·

Updated

2025-02-13

·

CVE-2024-12399

CVSS v3.1

7.1

High

VectorAV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H
Name of the Vulnerable Software and Affected Versions Pro-Face GP-Pro EX (affected versions not specified) Pro-face Remote HMI (affected versions not specified)
Description The issue is related to an improper enforcement of message integrity during transmission in a communication channel, which could cause partial loss of confidentiality, loss of integrity, and availability of the HMI when an attacker performs a man-in-the-middle attack by intercepting the communication. This allows a remote attacker to exploit the issue.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-924

Related Identifiers

BDU:2025-00556
CVE-2024-12399

Affected Products

Pro-Face Gp Pro Ex
Pro-Face Remote Hmi