Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5qpf-cx59-xvm8

Опубликовано: 08 окт. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 5.3

Описание

The web server of affected devices do not properly authenticate user request to the '/ClientArea/RuntimeInfoData.mwsl' endpoint. This could allow an unauthenticated remote attacker to gain knowledge about current actual and configured maximum cycle times as well as about configured maximum communication load.

The web server of affected devices do not properly authenticate user request to the '/ClientArea/RuntimeInfoData.mwsl' endpoint. This could allow an unauthenticated remote attacker to gain knowledge about current actual and configured maximum cycle times as well as about configured maximum communication load.

EPSS

Процентиль: 40%
0.00183
Низкий

6.9 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-288
CWE-862

Связанные уязвимости

CVSS3: 5.3
nvd
больше 1 года назад

The web server of affected devices do not properly authenticate user request to the '/ClientArea/RuntimeInfoData.mwsl' endpoint. This could allow an unauthenticated remote attacker to gain knowledge about current actual and configured maximum cycle times as well as about configured maximum communication load.

EPSS

Процентиль: 40%
0.00183
Низкий

6.9 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-288
CWE-862