CVE-2020-8768

Опубликовано: 17 фев. 2020

Источник: nvd

CVSS3: 9.4

CVSS2: 7.5

EPSS Низкий

Описание

An issue was discovered on Phoenix Contact Emalytics Controller ILC 2050 BI before 1.2.3 and BI-L before 1.2.3 devices. There is an insecure mechanism for read and write access to the configuration of the device. The mechanism can be discovered by examining a link on the website of the device.

Ссылки

https://cert.vde.com/de-de/advisories/vde-2020-001
Third Party Advisory
https://www.us-cert.gov/ics/advisories/icsa-20-063-02
Third Party Advisory
US Government Resource
https://cert.vde.com/de-de/advisories/vde-2020-001
Third Party Advisory
https://www.us-cert.gov/ics/advisories/icsa-20-063-02
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:phoenixcontact:ilc_2050_bi_firmware:*:*:*:*:*:*:*:*

Версия до 1.2.3 (исключая)

cpe:2.3:h:phoenixcontact:ilc_2050_bi:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:phoenixcontact:ilc_2050_bi-l_firmware:*:*:*:*:*:*:*:*

Версия до 1.2.3 (исключая)

cpe:2.3:h:phoenixcontact:ilc_2050_bi-l:-:*:*:*:*:*:*:*

EPSS

Процентиль: 69%

0.00609

Низкий

9.4 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-732

Связанные уязвимости

GHSA-63gj-7hwv-5q69

github

больше 3 лет назад