Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p6gr-96p8-25fw

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote attackers to bypass intended access restrictions via TCP traffic to port (1) 21 or (2) 23.

Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote attackers to bypass intended access restrictions via TCP traffic to port (1) 21 or (2) 23.

EPSS

Процентиль: 78%
0.01161
Низкий

Дефекты

CWE-287

Связанные уязвимости

nvd
около 12 лет назад

Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote attackers to bypass intended access restrictions via TCP traffic to port (1) 21 or (2) 23.

EPSS

Процентиль: 78%
0.01161
Низкий

Дефекты

CWE-287