Описание
Horner Automation’s RCC 972 with firmware version 15.40 has a static encryption key on the device. This could allow an attacker to perform unauthorized changes to the device, remotely execute arbitrary code, or cause a denial-of-service condition.
Ссылки
- PatchThird Party AdvisoryUS Government Resource
- PatchThird Party AdvisoryUS Government Resource
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:hornerautomation:rcc972_firmware:15.40:*:*:*:*:*:*:*
cpe:2.3:h:hornerautomation:rcc972:-:*:*:*:*:*:*:*
EPSS
Процентиль: 53%
0.00298
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-321
Связанные уязвимости
CVSS3: 9.8
github
больше 2 лет назад
Horner Automation’s RCC 972 with firmware version 15.40 has a static encryption key on the device. This could allow an attacker to perform unauthorized changes to the device, remotely execute arbitrary code, or cause a denial-of-service condition.
EPSS
Процентиль: 53%
0.00298
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-321