exploitDog

CVE-2018-14792

Опубликовано: 19 сент. 2018

Источник: nvd

CVSS3: 6.3

CVSS2: 6.8

EPSS Низкий

Описание

WECON PLC Editor version 1.3.3U may allow an attacker to execute code under the current process when processing project files.

Ссылки

https://ics-cert.us-cert.gov/advisories/ICSA-18-261-01
Third Party Advisory
US Government Resource
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-261-01
Third Party Advisory
US Government Resource
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:we-con:plc_editor:1.3.3u:*:*:*:*:*:*:*

EPSS

Процентиль: 48%

0.00251

Низкий

6.3 Medium

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-121

CWE-119

Связанные уязвимости

GHSA-v2gh-3wpg-5wcv

CVSS3: 6.3

github

больше 3 лет назад

WECON PLC Editor version 1.3.3U may allow an attacker to execute code under the current process when processing project files.

EPSS

Процентиль: 48%

0.00251

Низкий

6.3 Medium

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-121

CWE-119