Описание
A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All Versions) that could cause denial of service via a specially crafted HTTP packet
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 3.0.0 (включая)
Одновременно
cpe:2.3:o:schneider-electric:powerlogic_egx100_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:powerlogic_egx100:-:*:*:*:*:*:*:*
Конфигурация 2
Одновременно
cpe:2.3:o:schneider-electric:powerlogic_egx300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:powerlogic_egx300:-:*:*:*:*:*:*:*
EPSS
Процентиль: 77%
0.01077
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-20
Связанные уязвимости
CVSS3: 7.5
github
больше 3 лет назад
** UNSUPPORTED WHEN ASSIGNED ** A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All Versions) that could cause denial of service via a specially crafted HTTP packet.
EPSS
Процентиль: 77%
0.01077
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-20