CVE-2024-31484

A vulnerability has been identified in CPC80 Central Processing/Communication (All versions < V16.41), CPCI85 Central Processing/Communication (All versions < V5.30), CPCX26 Central Processing/Communication (All versions < V06.02), ETA4 Ethernet Interface IEC60870-5-104 (All versions < V10.46), ETA5 Ethernet Int. 1x100TX IEC61850 Ed.2 (All versions < V03.27), PCCX26 Ax 1703 PE, Contr, Communication Element (All versions < V06.05). The affected devices contain an improper null termination vulnerability while parsing a specific HTTP header. This could allow an attacker to execute code in the context of the current process or lead to denial of service condition.

• CWE-170

• https://seclists.org/fulldisclosure/2024/Jul/4
• https://cert-portal.siemens.com/productcert/html/ssa-620338.html
• https://cert-portal.siemens.com/productcert/html/ssa-871704.html
• https://seclists.org/fulldisclosure/2024/Jul/4
• https://seclists.org/fulldisclosure/2024/Nov/18
• https://cert-portal.siemens.com/productcert/html/ssa-620338.html
• https://cert-portal.siemens.com/productcert/html/ssa-871704.html

Published

May 14, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-31479Unauthenticated Denial of Service (DoS) vulnerabilities exis…7.5
• CVE-2024-3148A vulnerability, which was classified as critical, has been …8.8
• CVE-2024-31480Unauthenticated Denial of Service (DoS) vulnerabilities exis…7.5
• CVE-2024-31481Unauthenticated Denial of Service (DoS) vulnerabilities exis…7.5
• CVE-2024-31482An unauthenticated Denial-of-Service (DoS) vulnerability exi…7.5
• CVE-2024-31483An authenticated sensitive information disclosure vulnerabil…6.5
• CVE-2024-31485A vulnerability has been identified in CPCI85 Central Proces…8.6
• CVE-2024-31486A vulnerability has been identified in OPUPI0 AMQP/MQTT (All…6
• CVE-2024-31487A improper limitation of a pathname to a restricted director…6.5
• CVE-2024-31488An improper neutralization of inputs during web page generat…9
• CVE-2024-31489AAn improper certificate validation vulnerability [CWE-295] …8.1
• CVE-2024-3149A Server-Side Request Forgery (SSRF) vulnerability exists in…8.8