Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x5fh-cqhm-x62g

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause unauthenticated command execution in the controller when sending special HTTP requests.

A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause unauthenticated command execution in the controller when sending special HTTP requests.

EPSS

Процентиль: 54%
0.00309
Низкий

Дефекты

CWE-306

Связанные уязвимости

CVSS3: 9.8
nvd
около 5 лет назад

A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause unauthenticated command execution in the controller when sending special HTTP requests.

CVSS3: 8.2
fstec
около 5 лет назад

Уязвимость микропрограммного обеспечения программируемого логического контроллера Schneider Electric Modicon M340, Modicon Quantum, Modicon Premium, связанная с отсутствием аутентификации для критичной функции, позволяющая нарушителю выполнить произвольные команды

EPSS

Процентиль: 54%
0.00309
Низкий

Дефекты

CWE-306