Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jcxh-7f92-q9f6

Опубликовано: 11 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 7
CVSS3: 6.8

Описание

A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant Simulation V2404 (All versions < V2404.0010). The affected application does not properly restrict access to the file deletion functionality. This could allow an unauthorized attacker to delete files even when access to the system should be prohibited, resulting in potential data loss or unauthorized modification of system files.

A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant Simulation V2404 (All versions < V2404.0010). The affected application does not properly restrict access to the file deletion functionality. This could allow an unauthorized attacker to delete files even when access to the system should be prohibited, resulting in potential data loss or unauthorized modification of system files.

EPSS

Процентиль: 11%
0.00037
Низкий

7 High

CVSS4

6.8 Medium

CVSS3

Дефекты

CWE-552

Связанные уязвимости

CVSS3: 6.8
nvd
11 месяцев назад

A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant Simulation V2404 (All versions < V2404.0010). The affected application does not properly restrict access to the file deletion functionality. This could allow an unauthorized attacker to delete files even when access to the system should be prohibited, resulting in potential data loss or unauthorized modification of system files.

CVSS3: 6.8
fstec
11 месяцев назад

Уязвимость программной среды имитационного моделирования систем и процессов Siemens Tecnomatix Plant Simulation, связанная с использованием файлов и каталогов, доступных внешним сторонам, позволяющая нарушителю удалить или модифицировать произвольные файлы

EPSS

Процентиль: 11%
0.00037
Низкий

7 High

CVSS4

6.8 Medium

CVSS3

Дефекты

CWE-552