Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-prc6-9xc4-p6v8

Опубликовано: 11 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 6.2

Описание

A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant Simulation V2404 (All versions < V2404.0010). The affected application does not properly restrict the scope of files accessible to the simulation model. This could allow an unauthorized attacker to compromise the confidentiality of the system.

A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant Simulation V2404 (All versions < V2404.0010). The affected application does not properly restrict the scope of files accessible to the simulation model. This could allow an unauthorized attacker to compromise the confidentiality of the system.

EPSS

Процентиль: 10%
0.00035
Низкий

6.9 Medium

CVSS4

6.2 Medium

CVSS3

Дефекты

CWE-552

Связанные уязвимости

CVSS3: 6.2
nvd
11 месяцев назад

A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant Simulation V2404 (All versions < V2404.0010). The affected application does not properly restrict the scope of files accessible to the simulation model. This could allow an unauthorized attacker to compromise the confidentiality of the system.

CVSS3: 6.2
fstec
11 месяцев назад

Уязвимость программной среды имитационного моделирования систем и процессов Siemens Tecnomatix Plant Simulation, связанная с использованием файлов и каталогов, доступных внешним сторонам, позволяющая нарушителю удалить или модифицировать произвольные файлы

EPSS

Процентиль: 10%
0.00035
Низкий

6.9 Medium

CVSS4

6.2 Medium

CVSS3

Дефекты

CWE-552