Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wxmv-3hm7-2jqh

Опубликовано: 13 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 8.7
CVSS3: 8.8

Описание

The H2-DM1E PLC's authentication protocol appears to utilize either a custom encoding scheme or a challenge-response protocol. However, there's an observed anomaly in the H2-DM1E PLC's protocol execution, namely its acceptance of multiple distinct packets as valid authentication responses. This behavior deviates from standard security practices where a single, specific response or encoding pattern is expected for successful authentication.

The H2-DM1E PLC's authentication protocol appears to utilize either a custom encoding scheme or a challenge-response protocol. However, there's an observed anomaly in the H2-DM1E PLC's protocol execution, namely its acceptance of multiple distinct packets as valid authentication responses. This behavior deviates from standard security practices where a single, specific response or encoding pattern is expected for successful authentication.

EPSS

Процентиль: 35%
0.00145
Низкий

8.7 High

CVSS4

8.8 High

CVSS3

Дефекты

CWE-384

Связанные уязвимости

CVSS3: 8.8
nvd
больше 1 года назад

The H2-DM1E PLC's authentication protocol appears to utilize either a custom encoding scheme or a challenge-response protocol. However, there's an observed anomaly in the H2-DM1E PLC's protocol execution, namely its acceptance of multiple distinct packets as valid authentication responses. This behavior deviates from standard security practices where a single, specific response or encoding pattern is expected for successful authentication.

EPSS

Процентиль: 35%
0.00145
Низкий

8.7 High

CVSS4

8.8 High

CVSS3

Дефекты

CWE-384