Описание
Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC WS Series WS0-GETH00200 all serial numbers allows a remote unauthenticated attacker to bypass authentication by capture-replay attack and illegally login to the affected module. As a result, the remote attacker who has logged in illegally may be able to disclose or tamper with the programs and parameters in the modules.
Ссылки
- Third Party Advisory
- Third Party AdvisoryUS Government Resource
- Vendor Advisory
- Third Party Advisory
- Third Party AdvisoryUS Government Resource
- Vendor Advisory
Уязвимые конфигурации
Одновременно
EPSS
5.9 Medium
CVSS3
7.5 High
CVSS3
Дефекты
Связанные уязвимости
Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC WS Series WS0-GETH00200 all serial numbers allows a remote unauthenticated attacker to bypass authentication by capture-replay attack and illegally login to the affected module. As a result, the remote attacker who has logged in illegally may be able to disclose or tamper with the programs and parameters in the modules.
Уязвимость микропрограммного обеспечения программируемых логических контроллеров MELSEC WS0-GETH00200, связанная с обходом процедуры аутентификации, позволяющая нарушителю обойти процесс аутентификации
EPSS
5.9 Medium
CVSS3
7.5 High
CVSS3