Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-49r4-q83q-h2wr

Опубликовано: 09 мая 2023
Источник: github
Github: Не прошло ревью
CVSS3: 3.3

Описание

A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The i2c mutex file is created with the permissions bits of -rw-rw-rw-. This file is used as a mutex for multiple applications interacting with i2c. This could allow an authenticated attacker with access to the SSH interface on the affected device to interfere with the integrity of the mutex and the data it protects.

A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The i2c mutex file is created with the permissions bits of -rw-rw-rw-. This file is used as a mutex for multiple applications interacting with i2c. This could allow an authenticated attacker with access to the SSH interface on the affected device to interfere with the integrity of the mutex and the data it protects.

EPSS

Процентиль: 9%
0.00033
Низкий

3.3 Low

CVSS3

Дефекты

CWE-378

Связанные уязвимости

CVSS3: 3.3
nvd
больше 2 лет назад

A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The `i2c` mutex file is created with the permissions bits of `-rw-rw-rw-`. This file is used as a mutex for multiple applications interacting with i2c. This could allow an authenticated attacker with access to the SSH interface on the affected device to interfere with the integrity of the mutex and the data it protects.

EPSS

Процентиль: 9%
0.00033
Низкий

3.3 Low

CVSS3

Дефекты

CWE-378