Description
The session hijacking attack targets the application layer's control mechanism, which manages authenticated sessions between a host PC and a PLC. During such sessions, a session key is utilized to maintain security. However, if an attacker captures this session key, they can inject traffic into an ongoing authenticated session. To successfully achieve this, the attacker also needs to spoof both the IP address and MAC address of the originating host which is typical of a session-based attack.
INFO
Published Date :
2024-09-13T16:33:02.575Z
Last Modified :
2024-09-13T17:43:05.159Z
Source :
icscert
AFFECTED PRODUCTS
The following products are affected by CVE-2024-43099 vulnerability.
| Vendors | Products |
|---|---|
| Automationdirect |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2024-43099.
CVSS Vulnerability Scoring System
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Attack Requirements
Privileges Required
User Interaction
VS Confidentiality
VS Integrity
VS Availability
SS Confidentiality
SS Integrity
SS Availability
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact