Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fj78-7vc8-pxrm

Опубликовано: 06 июл. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

Rockwell Automation Modbus TCP Server AOI prior to 2.04.00 is vulnerable to an unauthorized user sending a malformed message that could cause the controller to respond with a copy of the most recent response to the last valid request. If exploited, an unauthorized user could read the connected device’s Modbus TCP Server AOI information.

Rockwell Automation Modbus TCP Server AOI prior to 2.04.00 is vulnerable to an unauthorized user sending a malformed message that could cause the controller to respond with a copy of the most recent response to the last valid request. If exploited, an unauthorized user could read the connected device’s Modbus TCP Server AOI information.

EPSS

Процентиль: 15%
0.00049
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 5.3
nvd
почти 3 года назад

Rockwell Automation Modbus TCP Server AOI prior to 2.04.00 is vulnerable to an unauthorized user sending a malformed message that could cause the controller to respond with a copy of the most recent response to the last valid request. If exploited, an unauthorized user could read the connected device’s Modbus TCP Server AOI information.

CVSS3: 5.3
fstec
почти 3 года назад

Уязвимость сервера Rockwell Automation Modbus TCP Server AO, связанная с отсутствием защиты служебных данных, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 15%
0.00049
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-200