CVE-2018-12634

Опубликовано: 22 июн. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 5

EPSS Критический

Описание

CirCarLife Scada before 4.3 allows remote attackers to obtain sensitive information via a direct request for the html/log or services/system/info.html URI.

Ссылки

https://github.com/SadFud/Exploits/tree/master/Real%20World/Suites/cir-pwn-life
Third Party Advisory
https://www.exploit-db.com/exploits/45384/
Exploit
Third Party Advisory
VDB Entry
https://www.seebug.org/vuldb/ssvid-97353
Third Party Advisory
https://github.com/SadFud/Exploits/tree/master/Real%20World/Suites/cir-pwn-life
Third Party Advisory
https://www.exploit-db.com/exploits/45384/
Exploit
Third Party Advisory
VDB Entry
https://www.seebug.org/vuldb/ssvid-97353
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:circontrol:circarlife_scada:*:*:*:*:*:*:*:*

Версия до 4.3 (исключая)

EPSS

Процентиль: 100%

0.92847

Критический

9.8 Critical

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-9673-gf8m-63q4