Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h92g-5h7r-qg2w

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The installations for ABB System 800xA Information Manager versions 5.1, 6.0 to 6.0.3.2 and 6.1 wrongly contain an auxiliary component. An attacker is able to use this for an XSS-like attack to an authenticated local user, which might lead to execution of arbitrary code.

The installations for ABB System 800xA Information Manager versions 5.1, 6.0 to 6.0.3.2 and 6.1 wrongly contain an auxiliary component. An attacker is able to use this for an XSS-like attack to an authenticated local user, which might lead to execution of arbitrary code.

EPSS

Процентиль: 64%
0.00465
Низкий

Связанные уязвимости

CVSS3: 8.8
nvd
почти 6 лет назад

The installations for ABB System 800xA Information Manager versions 5.1, 6.0 to 6.0.3.2 and 6.1 wrongly contain an auxiliary component. An attacker is able to use this for an XSS-like attack to an authenticated local user, which might lead to execution of arbitrary code.

CVSS3: 8.8
fstec
почти 6 лет назад

Уязвимость компонента Information Manager распределенной системы управления ABB System 800xA, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 64%
0.00465
Низкий