CVE-2024-42408

Опубликовано: 08 авг. 2024

Источник: nvd

CVSS3: 5.3

CVSS3: 3.7

EPSS Низкий

Описание

The InfoScan client download page can be intercepted with a proxy, to expose filenames located on the system, which could lead to additional information exposure.

Ссылки

https://portal.dtscada.com/#/security-bulletins?bulletin=1
Vendor Advisory
https://www.cisa.gov/news-events/ics-advisories/icsa-24-221-01
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:dorsettcontrols:infoscan:1.32:*:*:*:*:*:*:*

cpe:2.3:a:dorsettcontrols:infoscan:1.33:*:*:*:*:*:*:*

cpe:2.3:a:dorsettcontrols:infoscan:1.35:*:*:*:*:*:*:*

EPSS

Процентиль: 74%

0.008

Низкий

5.3 Medium

CVSS3

3.7 Low

CVSS3

Дефекты

CWE-22

Связанные уязвимости

GHSA-8h54-xh89-c57v

CVSS3: 5.3

github

больше 1 года назад

The InfoScan client download page can be intercepted with a proxy, to expose filenames located on the system, which could lead to additional information exposure.

EPSS

Процентиль: 74%

0.008

Низкий

5.3 Medium

CVSS3

3.7 Low

CVSS3

Дефекты

CWE-22