Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8h8v-4pgc-x2vp

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A CWE-787: Out-of-bounds Write vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause corruption of data, a crash, or code execution when uploading a specially crafted file on the controller over FTP.

A CWE-787: Out-of-bounds Write vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause corruption of data, a crash, or code execution when uploading a specially crafted file on the controller over FTP.

EPSS

Процентиль: 77%
0.01043
Низкий

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 8.8
nvd
около 5 лет назад

A CWE-787: Out-of-bounds Write vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause corruption of data, a crash, or code execution when uploading a specially crafted file on the controller over FTP.

CVSS3: 8.8
fstec
около 5 лет назад

Уязвимость микропрограммного обеспечения программируемого логического контроллера Schneider Electric Modicon M340, связанная с записью за границами буфера в памяти, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 77%
0.01043
Низкий

Дефекты

CWE-787