CVE-2018-17928

Опубликовано: 31 янв. 2019

Источник: nvd

CVSS3: 6.5

CVSS2: 3.3

EPSS Низкий

Описание

The product CMS-770 (Software Versions 1.7.1 and prior)is vulnerable that an attacker can read sensitive configuration files by bypassing the user authentication mechanism.

Ссылки

http://www.securityfocus.com/bid/106244
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-352-06
Mitigation
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/106244
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-352-06
Mitigation
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:abb:cms-770_firmware:*:*:*:*:*:*:*:*

Версия до 1.7.1 (включая)

cpe:2.3:h:abb:cms-770:-:*:*:*:*:*:*:*

EPSS

Процентиль: 50%

0.00265

Низкий

6.5 Medium

CVSS3

3.3 Low

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-qf28-rwjg-vr2r