Описание
In ScadaBR version 1.2.0, a Missing Authentication for Critical Function vulnerability could allow an unauthenticated attacker to send a HTTP GET requests to the SCADA system and inject arbitrary sensor readings.
Ссылки
- Third Party AdvisoryUS Government Resource
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:scadabr:scadabr:1.2:*:*:*:*:*:*:*
EPSS
Процентиль: 37%
0.00448
Низкий
9.1 Critical
CVSS3
Дефекты
CWE-306
Связанные уязвимости
CVSS3: 9.1
github
3 месяца назад
In ScadaBR version 1.2.0, a Missing Authentication for Critical Function vulnerability could allow an unauthenticated attacker to send a HTTP GET requests to the SCADA system and inject arbitrary sensor readings.
EPSS
Процентиль: 37%
0.00448
Низкий
9.1 Critical
CVSS3
Дефекты
CWE-306