Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-10613

Опубликовано: 15 апр. 2020
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to disclose sensitive information due to the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated structure. Authentication is not required to exploit this vulnerability. Only applicable to installations using DNP3 Data Sets.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:trianglemicroworks:scada_data_gateway:*:*:*:*:*:*:*:*
Версия от 2.41.0213 (включая) до 4.0.122 (включая)

EPSS

Процентиль: 71%
0.00697
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-125
CWE-125

Связанные уязвимости

github
больше 3 лет назад

Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to disclose sensitive information due to the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated structure. Authentication is not required to exploit this vulnerability. Only applicable to installations using DNP3 Data Sets.

EPSS

Процентиль: 71%
0.00697
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-125
CWE-125