Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g5fp-55mr-fxj5

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Design flaws in OPC classic and in custom netfilter modules allow an attacker to remotely activate rules on the firewall and to connect to any TCP port of a protected asset, thus bypassing the firewall. The attack methodology is a crafted OPC dynamic port shift.

An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Design flaws in OPC classic and in custom netfilter modules allow an attacker to remotely activate rules on the firewall and to connect to any TCP port of a protected asset, thus bypassing the firewall. The attack methodology is a crafted OPC dynamic port shift.

EPSS

Процентиль: 26%
0.00089
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 9.8
nvd
около 8 лет назад

An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Design flaws in OPC classic and in custom netfilter modules allow an attacker to remotely activate rules on the firewall and to connect to any TCP port of a protected asset, thus bypassing the firewall. The attack methodology is a crafted OPC dynamic port shift.

CVSS3: 9.8
fstec
больше 8 лет назад

Уязвимость реализации протокола OPC Classic межсетевого экрана Tofino Xenon Security Appliance, позволяющая нарушителю подключиться к произвольному TCP-порту защищаемого объекта

EPSS

Процентиль: 26%
0.00089
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-20