Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pjv9-rw8r-7262

Опубликовано: 05 апр. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

The programming protocol allows for a previously entered password and lock state to be read by an attacker. If the previously entered password was successful, the attacker can then use the password to unlock Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00.

The programming protocol allows for a previously entered password and lock state to be read by an attacker. If the previously entered password was successful, the attacker can then use the password to unlock Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00.

EPSS

Процентиль: 44%
0.0022
Низкий

7.5 High

CVSS3

Дефекты

CWE-522

Связанные уязвимости

CVSS3: 7.5
nvd
почти 4 года назад

The programming protocol allows for a previously entered password and lock state to be read by an attacker. If the previously entered password was successful, the attacker can then use the password to unlock Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00.

EPSS

Процентиль: 44%
0.0022
Низкий

7.5 High

CVSS3

Дефекты

CWE-522