PT-2024-24058 · Eaton · Eaton Foreseer

Microsoft · Published 2024-09-13 · Updated 2025-08-26 · CVE-2024-31416

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Eaton Foreseer (affected versions not specified)

Description The Eaton Foreseer software has a security issue related to its customizable input fields, which allow users to configure parameters such as alarms and reports. Some of these input fields do not check the length and bounds of the entered values. Exploitation of this flaw can result in excessive memory consumption or integer overflow.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Integer Overflow

Weakness Enumeration

CWE-190

CWE-1284

Related Identifiers

CVE-2024-31416

Affected Products

Eaton Foreseer

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2024-31416 · Security Note
• https://eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2024-1008.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-31416 · Vendor Advisory
• https://t.me/cveNotify/133430 · Telegram Post
• https://t.me/cvedetector/5627 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1834666064581390485 · Twitter Post
• https://t.me/cvenotify/95333 · Telegram Post
• https://twitter.com/CVEnew/status/1834648949652869543 · Twitter Post
• https://t.me/cvenotify/94625 · Telegram Post