Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7pcw-cjv4-c788

Опубликовано: 27 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 7
CVSS3: 6.3

Описание

Advantech ADAM-5630 has built-in commands that can be executed without authenticating the user. These commands allow for restarting the operating system, rebooting the hardware, and stopping the execution. The commands can be sent to a simple HTTP request and are executed by the device automatically, without discrimination of origin or level of privileges of the user sending the commands.

Advantech ADAM-5630 has built-in commands that can be executed without authenticating the user. These commands allow for restarting the operating system, rebooting the hardware, and stopping the execution. The commands can be sent to a simple HTTP request and are executed by the device automatically, without discrimination of origin or level of privileges of the user sending the commands.

EPSS

Процентиль: 19%
0.00062
Низкий

7 High

CVSS4

6.3 Medium

CVSS3

Дефекты

CWE-306

Связанные уязвимости

CVSS3: 6.3
nvd
больше 1 года назад

Advantech ADAM-5630 has built-in commands that can be executed without authenticating the user. These commands allow for restarting the operating system, rebooting the hardware, and stopping the execution. The commands can be sent to a simple HTTP request and are executed by the device automatically, without discrimination of origin or level of privileges of the user sending the commands.

CVSS3: 6.3
fstec
больше 1 года назад

Уязвимость микропрограммного обеспечения программируемого логического контроллера (ПЛК) Advantech ADAM-5630, связанная с отсутствием аутентификация для критической функции, позволяющая нарушителю выполнить произвольные команды и вызвать отказ в обслуживании

EPSS

Процентиль: 19%
0.00062
Низкий

7 High

CVSS4

6.3 Medium

CVSS3

Дефекты

CWE-306