{"id":"CVE-2024-12142","aliases":["EUVD-2024-50625","GHSA-9h4w-p78f-w2hw"],"status":"published","title":"CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that...","description":"CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could\ncause information disclosure of restricted web page, modification of web page and denial of\nservice when specific web pages are modified and restricted functions are invoked.","severity":{"version":"4.0","score":8.8,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00364,"percentile":0.30499,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2025-01-17T10:19:11Z","modified":"2026-06-17T06:59:07Z","products":[{"vendor":"schneider electric","product":"bmxnoe0100"},{"vendor":"schneider electric","product":"bmxnoe0110"},{"vendor":"schneider electric","product":"bmxnor0200h"},{"vendor":"schneider electric","product":"modicon m340 processors (part numbers bmxp34*)"},{"vendor":"schneider_electric","product":"bmxnoe0100"},{"vendor":"schneider_electric","product":"bmxnoe0110"},{"vendor":"schneider_electric","product":"bmxnor0200h"}],"references":[{"url":"https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-014-05\u0026p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=SEVD-2025-014-05.pdf"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-12142"},{"url":"https://github.com/advisories/GHSA-9h4w-p78f-w2hw"}],"sources":{"cve":[{"id":"CVE-2024-12142","description":"CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could\ncause information disclosure of restricted web page, modification of web page and denial of\nservice when specific web pages are modified and restricted functions are invoked.","status":"published","published":"2025-01-17T10:19:11.768Z","modified":"2025-02-12T16:51:46.673Z","cvss":[{"version":"4.0","score":8.8,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna"},{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:34:12.287582Z"}],"euvd":[{"id":"EUVD-2024-50625","description":"CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could\ncause information disclosure of restricted web page, modification of web page and denial of\nservice when specific web pages are modified and restricted functions are invoked.","status":"published","published":"2025-01-17T10:19:11Z","modified":"2025-02-12T16:51:46Z","cvss":[{"version":"4.0","score":8.8,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-03T00:03:57.395516Z"}],"ghsa":[{"id":"GHSA-9h4w-p78f-w2hw","title":"CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that...","description":"CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could\ncause information disclosure of restricted web page, modification of web page and denial of\nservice when specific web pages are modified and restricted functions are invoked.","status":"published","published":"2025-01-17T12:30:41Z","modified":"2025-01-17T12:30:45Z","cvss":[{"version":"4.0","score":8.8,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"},{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:59:35.754921Z"}],"nvd":[{"id":"CVE-2024-12142","description":"CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could\ncause information disclosure of restricted web page, modification of web page and denial of\nservice when specific web pages are modified and restricted functions are invoked.","status":"published","published":"2025-01-17T11:15:08.683Z","modified":"2026-06-17T06:59:07.42Z","cvss":[{"version":"4.0","score":8.8,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:10:42.895329Z"}]}}