Strix
26.1K

CVE-2024-31416

MEDIUMCVSS 6.5/10EPSS 0.27%

Last modified

CVE-2024-31416 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. The Eaton Foreseer software provides multiple customizable input fields for the users to configure parameters in the tool like alarms, reports, etc. Some of these input fields were not checking the length and bounds of the entered value. EPSS estimates a 0.27% chance of exploitation in the next 30 days.

Description

The Eaton Foreseer software provides multiple customizable input fields for the users to configure parameters in the tool like alarms, reports, etc. Some of these input fields were not checking the length and bounds of the entered value. The exploit of this security flaw by a bad actor may result in excessive memory consumption or integer overflow.

Metrics

CVSS 3.1
6.5/10

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Probability
0.27%

18.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
EatonForeseer Electrical Power Monitoring System< 7.8.600

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2024-31416?
The Eaton Foreseer software provides multiple customizable input fields for the users to configure parameters in the tool like alarms, reports, etc. Some of these input fields were not checking the length and bounds of the entered value. The exploit of this security flaw by a bad actor may result in excessive memory consumption or integer overflow.
How severe is CVE-2024-31416?
CVE-2024-31416 has a CVSS score of 6.5/10 (MEDIUM severity). The EPSS model estimates a 0.27% probability of exploitation in the next 30 days.
How do I fix CVE-2024-31416?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2024-31416?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST