Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cpxg-749c-f5cf

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), and SCADAPack RemoteConnect for x70, all versions, that could cause protected derived function blocks to be read or modified by unauthorized users when accessing a project file.

Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), and SCADAPack RemoteConnect for x70, all versions, that could cause protected derived function blocks to be read or modified by unauthorized users when accessing a project file.

EPSS

Процентиль: 14%
0.00045
Низкий

Дефекты

CWE-522

Связанные уязвимости

CVSS3: 7.1
nvd
больше 4 лет назад

Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), and SCADAPack RemoteConnect for x70, all versions, that could cause protected derived function blocks to be read or modified by unauthorized users when accessing a project file.

CVSS3: 8.6
fstec
больше 4 лет назад

Уязвимость программного средства программирования ПЛК (программируемых логических контроллеров) EcoStruxure Control Expert, программного средства конфигурирования SCADAPack RemoteConnect, системы автоматизации технологических процессов EcoStruxure Process Expert, позволяющяя нарушителю получить несанкционированный доступ к файлам проекта

EPSS

Процентиль: 14%
0.00045
Низкий

Дефекты

CWE-522