Описание
A CWE-331: Insufficient Entropy vulnerability exists that could cause unintended connection from an internal network to an external network when an attacker manages to decrypt the SESU proxy password from the registry. Affected Product: Schneider Electric Software Update, V2.3.0 through V2.5.1
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 2.3.0 (включая) до 2.5.2 (исключая)
cpe:2.3:a:schneider-electric:software_update:*:*:*:*:*:*:*:*
EPSS
Процентиль: 17%
0.00054
Низкий
3.8 Low
CVSS3
2.1 Low
CVSS2
Дефекты
CWE-331
Связанные уязвимости
github
около 4 лет назад
A CWE-331: Insufficient Entropy vulnerability exists that could cause unintended connection from an internal network to an external network when an attacker manages to decrypt the SESU proxy password from the registry. Affected Product: Schneider Electric Software Update, V2.3.0 through V2.5.1
EPSS
Процентиль: 17%
0.00054
Низкий
3.8 Low
CVSS3
2.1 Low
CVSS2
Дефекты
CWE-331