CVE-2024-9409

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

CWE-400: An Uncontrolled Resource Consumption vulnerability exists that could cause the device to become unresponsive resulting in communication loss when a large amount of IGMP packets is present in the network.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

Vendor	Product	Versions
Schneider Electric	PowerLogic PM5320	Version 2.3.8 and prior
Schneider Electric	PowerLogic PM5340	Version 2.3.8 and prior
Schneider Electric	PowerLogic PM5341	Version 2.6.6 and prior
schneider-electric	powerlogic_pm5320	<= 2.3.8
schneider-electric	powerlogic_pm5340	<= 2.3.8
schneider-electric	powerlogic_pm5341	<= 2.6.6

References

https://download.schneider-electric.com/doc/SEVD-2024-317-01/SEVD-2024-317-01.pdfMitigation, Patch, Vendor Advisory

Timeline

Published: Nov 13, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-94105.3Ada.cx's Sentry configuration allowed for blind server-side request forgeries (SSRF) through the use of a data scraping endpoint.CVE-2024-94113.5A vulnerability classified as problematic has been found in OFCMS 1.1.2. This affects the function add of the file /admin/system/dict/add.js CVE-2024-94128.4An improper authorization vulnerability exists in the Rockwell Automation affected products that could allow an unauthorized user to sign in CVE-2024-94138.0The transport_message_handler function in SCP-Firmware release versions 2.11.0-2.15.0 does not properly handle errors, potentially allowing CVE-2024-94147.0In LAquis SCADA version 4.7.1.511, a cross-site scripting vulnerability could allow an attacker to inject arbitrary code into a web page. Th CVE-2024-94158.8A Path Traversal vulnerability exists in the file upload functionality of transformeroptimus/superagi version 0.0.14. This vulnerability all CVE-2024-94165.4The Modula Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's bundled FancyBox JavaScript libr CVE-2024-94176.1The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to limited file uploads due to a misconfigured file type validat CVE-2024-94186.5In version 0.0.14 of transformeroptimus/superagi, the API endpoint `/api/users/get/{id}` returns the user's password in plaintext. This vuln CVE-2024-94199.8Client / Server PCs with the HP Smart Universal Printing Driver installed are potentially vulnerable to Remote Code Execution and/or Elevati CVE-2024-94208.8A use-after-free in Ivanti Connect Secure before version 22.7R2.3 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a r CVE-2024-94215.4The Login Logout Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'class' parameter in all versions up to