by Kastro
Paper/Archive/CVE-2024-28878

CVE-2024-28878

IOSiX IO-1020 Micro ELD — IOSIX IO-1020 Micro ELD Download of Code Without Integrity Check

EPSS 0.3%CVSS 9.6
critical.is priorityof 100
33
CVSS 9.6 (CNA)9.6 / 10 × 3028.8Not in CISA KEV+300.0EPSS percentile 19.9.199 × 204.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

IO-1020 Micro ELD downloads source code or an executable from an adjacent location and executes the code without sufficiently verifying the origin or integrity of the code.

Affected

ProductAffectedFixed inSource
IO-1020 Micro ELD≤ 360–CNA
io-1020_micro_eld< 360360CISA-ADP

Scores by source

icscert (CNA)9.6CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refcisa.gov/news-events/ics-advisories/icsa-24-093-01