CVE-2019-13511

Опубликовано: 15 авг. 2019

Источник: nvd

CVSS3: 3.3

CVSS2: 4.3

EPSS Низкий

Описание

Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain an INFORMATION EXPOSURE CWE-200. A maliciously crafted Arena file opened by an unsuspecting user may result in the limited exposure of information related to the targeted workstation.

Ссылки

https://www.us-cert.gov/ics/advisories/icsa-19-213-05
Mitigation
Third Party Advisory
US Government Resource
https://www.zerodayinitiative.com/advisories/ZDI-20-810/
Third Party Advisory
VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-20-811/
Third Party Advisory
VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-20-812/
Third Party Advisory
VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-20-813/
Third Party Advisory
VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-20-814/
Third Party Advisory
VDB Entry
https://www.us-cert.gov/ics/advisories/icsa-19-213-05
Mitigation
Third Party Advisory
US Government Resource
https://www.zerodayinitiative.com/advisories/ZDI-20-810/
Third Party Advisory
VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-20-811/
Third Party Advisory
VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-20-812/
Third Party Advisory
VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-20-813/
Third Party Advisory
VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-20-814/
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:rockwellautomation:arena:*:*:*:*:*:*:*:*

Версия до 16.00.00 (включая)

EPSS

Процентиль: 13%

0.00042

Низкий

3.3 Low

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-200

CWE-416

Связанные уязвимости

GHSA-6p7p-7664-cqrj