Описание
A vulnerability has been identified in SENTRON powermanager V3 (All versions). The affected application assigns improper access rights to a specific folder containing configuration files. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 3.0 (включая) до 3.6 (включая)
cpe:2.3:a:siemens:sentron_powermanager_3:*:*:*:*:*:*:*:*
EPSS
Процентиль: 9%
0.00034
Низкий
7.8 High
CVSS3
7.2 High
CVSS2
Дефекты
CWE-732
Связанные уязвимости
github
больше 3 лет назад
A vulnerability has been identified in SENTRON powermanager V3 (All versions). The affected application assigns improper access rights to a specific folder containing configuration files. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges.
EPSS
Процентиль: 9%
0.00034
Низкий
7.8 High
CVSS3
7.2 High
CVSS2
Дефекты
CWE-732