Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f729-p9c9-fm58

Опубликовано: 09 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 8.7
CVSS3: 8.3

Описание

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected application do not properly validate input parameters in its REST API, resulting in improper handling of unexpected arguments. This could allow an authenticated attacker to execute arbitrary code with limited privileges.

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected application do not properly validate input parameters in its REST API, resulting in improper handling of unexpected arguments. This could allow an authenticated attacker to execute arbitrary code with limited privileges.

EPSS

Процентиль: 27%
0.00095
Низкий

8.7 High

CVSS4

8.3 High

CVSS3

Дефекты

CWE-77

Связанные уязвимости

CVSS3: 8.3
nvd
2 месяца назад

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected application do not properly validate input parameters in its REST API, resulting in improper handling of unexpected arguments. This could allow an authenticated attacker to execute arbitrary code with limited privileges.

CVSS3: 8.8
fstec
2 месяца назад

Уязвимость микропрограммного обеспечения коммуникационного шлюза SIMATIC CN 4100, связанная с непринятием мер по чистке данных на управляющем уровне, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 27%
0.00095
Низкий

8.7 High

CVSS4

8.3 High

CVSS3

Дефекты

CWE-77