Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c2xc-7cgf-x32h

Опубликовано: 06 апр. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Insecure Storage of Sensitive Information vulnerability in ABB My Control System (on-premise) allows an attacker who successfully exploited this vulnerability to gain access to the secure application data or take control of the application. Of the services that make up the My Control System (on-premise) application, the following ones are affected by this vulnerability: User Interface System Monitoring1 Asset Inventory This issue affects My Control System (on-premise): from 5.0;0 through 5.13.

Insecure Storage of Sensitive Information vulnerability in ABB My Control System (on-premise) allows an attacker who successfully exploited this vulnerability to gain access to the secure application data or take control of the application. Of the services that make up the My Control System (on-premise) application, the following ones are affected by this vulnerability: User Interface System Monitoring1 Asset Inventory This issue affects My Control System (on-premise): from 5.0;0 through 5.13.

EPSS

Процентиль: 51%
0.00282
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-922

Связанные уязвимости

CVSS3: 5.4
nvd
почти 3 года назад

Insecure Storage of Sensitive Information vulnerability in ABB My Control System (on-premise) allows an attacker who successfully exploited this vulnerability to gain access to the secure application data or take control of the application. Of the services that make up the My Control System (on-premise) application, the following ones are affected by this vulnerability: User Interface System Monitoring1 Asset Inventory This issue affects My Control System (on-premise): from 5.0;0 through 5.13.

CVSS3: 9.8
fstec
почти 3 года назад

Уязвимость веб-интерфейса платформы для управления продуктами и системами автоматизации ABB My Control System, связанная с незащищённым хранением конфиденциальной информации, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 51%
0.00282
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-922