Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-63vm-7c93-254f

Опубликовано: 10 июл. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Improper Certificate Validation (CWE-295) in the Controller 7000 OneLink implementation could allow an unprivileged attacker to perform a limited denial of service or perform privileged overrides during the initial configuration of the Controller, there is no risk for Controllers once they are connected.

This issue affects Controller 7000:

9.30 prior to vCR9.30.250624a (distributed in 9.30.1871 (MR1)).

Improper Certificate Validation (CWE-295) in the Controller 7000 OneLink implementation could allow an unprivileged attacker to perform a limited denial of service or perform privileged overrides during the initial configuration of the Controller, there is no risk for Controllers once they are connected.

This issue affects Controller 7000:

9.30 prior to vCR9.30.250624a (distributed in 9.30.1871 (MR1)).

EPSS

Процентиль: 10%
0.00035
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-295

Связанные уязвимости

CVSS3: 6.5
nvd
7 месяцев назад

Improper Certificate Validation (CWE-295) in the Controller 7000 OneLink implementation could allow an unprivileged attacker to perform a limited denial of service or perform privileged overrides during the initial configuration of the Controller, there is no risk for Controllers once they are connected. This issue affects Controller 7000: 9.30 prior to vCR9.30.250624a (distributed in 9.30.1871 (MR1)).

EPSS

Процентиль: 10%
0.00035
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-295