PT-2025-25183 · Unknown · Perfect Harmony Gh180

Published 2025-06-11 · Updated 2025-06-11 · CVE-2024-35295

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Perfect Harmony GH180 versions V8.0 through V8.3.3

Description A security issue has been identified where the maintenance connection of affected devices does not protect access to the device's control unit configuration. This could allow an attacker with physical access to the maintenance connection's port to make arbitrary configuration changes.

Recommendations For Perfect Harmony GH180 versions V8.0 through V8.3.3, restrict physical access to the maintenance connection's port to minimize the risk of exploitation. Consider implementing additional security measures to protect the device's control unit configuration until a fix is available.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2024-35295

Affected Products

Perfect Harmony Gh180

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-35295 · Security Note
• https://innomotics.com/hub/en/ISA-771113 · Note
• https://twitter.com/CVEnew/status/1932698350811230603 · Twitter Post
• https://cert-portal.siemens.com/productcert/html/ssa-771113.html · Note
• https://t.me/cvetracker/26005 · Telegram Post