Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-6868

Опубликовано: 07 июл. 2017
Источник: nvd
CVSS3: 8.1
CVSS2: 6.8
EPSS Низкий

Описание

An Improper Authentication issue was discovered in Siemens SIMATIC CP 44x-1 RNA, all versions prior to 1.4.1. An unauthenticated remote attacker may be able to perform administrative actions on the Communication Process (CP) of the RNA series module, if network access to Port 102/TCP is available and the configuration file for the CP is stored on the RNA's CPU.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:siemens:simatic_cp_44x-1_redundant_network_access_modules:*:*:*:*:*:*:*:*
Версия до 1.4.0 (включая)

EPSS

Процентиль: 88%
0.04201
Низкий

8.1 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-287
CWE-287

Связанные уязвимости

CVSS3: 8.1
github
больше 3 лет назад

An Improper Authentication issue was discovered in Siemens SIMATIC CP 44x-1 RNA, all versions prior to 1.4.1. An unauthenticated remote attacker may be able to perform administrative actions on the Communication Process (CP) of the RNA series module, if network access to Port 102/TCP is available and the configuration file for the CP is stored on the RNA's CPU.

EPSS

Процентиль: 88%
0.04201
Низкий

8.1 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-287
CWE-287