{"id":"CVE-2024-5056","aliases":["EUVD-2024-46320","GHSA-fm6m-fmh2-f72v"],"status":"published","title":"CWE-552: Files or Directories Accessible to External Parties vulnerability exists which may...","description":"CWE-552: Files or Directories Accessible to External Parties vulnerability exists which may\nprevent user to update the device firmware and prevent proper behavior of the webserver when\nspecific files or directories are removed from the filesystem.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00351,"percentile":0.29044,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-552"],"published":"2024-06-12T12:10:43Z","modified":"2026-06-17T08:14:59Z","products":[{"vendor":"schneider electric","product":"modicon m340"},{"vendor":"schneider electric","product":"network module, modicon m340, ethernet tcp/ip bmxnoe0110"},{"vendor":"schneider electric","product":"network module, modicon m340, modbus/tcp bmxnoe0100"},{"vendor":"schneider-electric","product":"bmxnoe0100_firmware"},{"vendor":"schneider-electric","product":"bmxnoe0110_firmware"},{"vendor":"schneider-electric","product":"modicom_m340"},{"vendor":"schneider-electric","product":"modicom_m340_firmware"},{"vendor":"schneider-electric","product":"modicon_m340_firmware"}],"references":[{"url":"https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-163-01\u0026p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=SEVD-2024-163-01.pdf","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-5056"},{"url":"https://github.com/advisories/GHSA-fm6m-fmh2-f72v"}],"sources":{"cve":[{"id":"CVE-2024-5056","description":"CWE-552: Files or Directories Accessible to External Parties vulnerability exists which may\nprevent user to update the device firmware and prevent proper behavior of the webserver when\nspecific files or directories are removed from the filesystem.","status":"published","published":"2024-06-12T12:10:43.25Z","modified":"2024-08-01T21:03:10.683Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-552"],"updated_at":"2026-11-02T14:34:01.630882Z"}],"euvd":[{"id":"EUVD-2024-46320","description":"CWE-552: Files or Directories Accessible to External Parties vulnerability exists which may\nprevent user to update the device firmware and prevent proper behavior of the webserver when\nspecific files or directories are removed from the filesystem.","status":"published","published":"2024-06-12T12:10:43Z","modified":"2024-08-01T21:03:10Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-03T03:50:35.230694Z"}],"ghsa":[{"id":"GHSA-fm6m-fmh2-f72v","title":"CWE-552: Files or Directories Accessible to External Parties vulnerability exists which may...","description":"CWE-552: Files or Directories Accessible to External Parties vulnerability exists which may\nprevent user to update the device firmware and prevent proper behavior of the webserver when\nspecific files or directories are removed from the filesystem.","status":"published","published":"2024-06-12T12:30:41Z","modified":"2024-06-12T12:30:49Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"cwes":["CWE-552"],"updated_at":"2026-11-02T14:57:28.765205Z"}],"nvd":[{"id":"CVE-2024-5056","description":"CWE-552: Files or Directories Accessible to External Parties vulnerability exists which may\nprevent user to update the device firmware and prevent proper behavior of the webserver when\nspecific files or directories are removed from the filesystem.","status":"published","published":"2024-06-12T12:15:10.233Z","modified":"2026-06-17T08:14:59.89Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"primary"}],"cwes":["CWE-552"],"updated_at":"2026-11-02T14:10:04.804473Z"}]}}