Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jc9h-j7vp-j9jw

Опубликовано: 28 окт. 2022
Источник: github
Github: Не прошло ревью
CVSS4: 9.2
CVSS3: 9.8

Описание

The HEIDENHAIN Controller TNC 640, version 340590 07 SP5, running HEROS 5.08.3 controlling the HARTFORD 5A-65E CNC machine is vulnerable to improper authentication, which may allow an attacker to deny service to the production line, steal sensitive data from the production line, and alter any products created by the production line.

The HEIDENHAIN Controller TNC 640, version 340590 07 SP5, running HEROS 5.08.3 controlling the HARTFORD 5A-65E CNC machine is vulnerable to improper authentication, which may allow an attacker to deny service to the production line, steal sensitive data from the production line, and alter any products created by the production line.

EPSS

Процентиль: 48%
0.00254
Низкий

9.2 Critical

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-1188
CWE-287

Связанные уязвимости

CVSS3: 9.8
nvd
больше 3 лет назад

The HEIDENHAIN Controller TNC 640 NC software Version 340590 07 SP5, is vulnerable to improper authentication in its DNC communication for CNC machines. Authentication is not enabled by default for DNC communication. This vulnerability may allow an attacker to deny service on the production line, steal sensitive data from the production line, and alter any products created by the production line. Note: CNC machines running the TNC 640 controller require DNC to be enabled for DNC communication to be present.

EPSS

Процентиль: 48%
0.00254
Низкий

9.2 Critical

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-1188
CWE-287