Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mwjc-697v-r7m7

Опубликовано: 14 сент. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

A vulnerability has been identified in SIMATIC PCS neo (Administration Console) V4.0 (All versions), SIMATIC PCS neo (Administration Console) V4.0 Update 1 (All versions). The affected application leaks Windows admin credentials. An attacker with local access to the Administration Console could get the credentials, and impersonate the admin user, thereby gaining admin access to other Windows systems.

A vulnerability has been identified in SIMATIC PCS neo (Administration Console) V4.0 (All versions), SIMATIC PCS neo (Administration Console) V4.0 Update 1 (All versions). The affected application leaks Windows admin credentials. An attacker with local access to the Administration Console could get the credentials, and impersonate the admin user, thereby gaining admin access to other Windows systems.

EPSS

Процентиль: 8%
0.00028
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-538
CWE-668

Связанные уязвимости

CVSS3: 5.5
nvd
больше 2 лет назад

A vulnerability has been identified in SIMATIC PCS neo (Administration Console) V4.0 (All versions), SIMATIC PCS neo (Administration Console) V4.0 Update 1 (All versions). The affected application leaks Windows admin credentials. An attacker with local access to the Administration Console could get the credentials, and impersonate the admin user, thereby gaining admin access to other Windows systems.

CVSS3: 5.5
fstec
больше 2 лет назад

Уязвимость консоли администрирования веб-системы управления технологическими процессами SIMATIC PCS neo, позволяющая нарушителю получить учетные данные администратора Windows

EPSS

Процентиль: 8%
0.00028
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-538
CWE-668