PT-2025-2895 · Xinje · Xinje Xl5E-16T+1

Published 2025-01-15 · Updated 2025-01-17 · CVE-2024-50954

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions XINJE XL5E-16T and XD5E-24R-E versions V3.5.3b through V3.7.2a

Description The vulnerability is related to the handling of Modbus messages. When a TCP connection is established with the controllers within a local area network (LAN), sending a specific Modbus message to the controller can cause the PLC to crash, interrupting the normal operation of the programs running in the PLC. This results in the ERR indicator light turning on and the RUN indicator light turning off.

Recommendations For versions V3.5.3b through V3.7.2a, consider restricting access to the Modbus protocol to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using the Modbus protocol in the affected controllers until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Weakness Enumeration

CWE-94

CWE-703

Related Identifiers

CVE-2024-50954

Affected Products

Xinje Xd5E-24R

Xinje Xl5E-16T

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2024-50954 · Security Note
• https://twitter.com/CVEnew/status/1879858781456322844 · Twitter Post
• https://github.com/Curator-Kim/Vulnerability-mining/blob/master/XINJE%20XL5E-16T%20XD5E-24R%20Modbus/XINJE%20XL5E-16T%20XD5E-24R%20Modbus.md · Note