Количество 3
Количество 3
CVE-2022-26303
An external config control vulnerability exists in the OAS Engine SecureAddUser functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted series of network requests can lead to the creation of an OAS user account. An attacker can send a sequence of requests to trigger this vulnerability.
GHSA-v4q3-4wc9-gf9f
An external config control vulnerability exists in the OAS Engine SecureAddUser functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted series of network requests can lead to the creation of an OAS user account. An attacker can send a sequence of requests to trigger this vulnerability.
BDU:2022-04240
Уязвимость функции OAS Engine SecureAddUser платформы для передачи данных между устройствами и приложениями OAS Platform, позволяющая нарушителю получить несанкционированный доступ к системе
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2022-26303 An external config control vulnerability exists in the OAS Engine SecureAddUser functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted series of network requests can lead to the creation of an OAS user account. An attacker can send a sequence of requests to trigger this vulnerability. | CVSS3: 7.5 | 0% Низкий | больше 3 лет назад | |
GHSA-v4q3-4wc9-gf9f An external config control vulnerability exists in the OAS Engine SecureAddUser functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted series of network requests can lead to the creation of an OAS user account. An attacker can send a sequence of requests to trigger this vulnerability. | CVSS3: 7.5 | 0% Низкий | больше 3 лет назад | |
BDU:2022-04240 Уязвимость функции OAS Engine SecureAddUser платформы для передачи данных между устройствами и приложениями OAS Platform, позволяющая нарушителю получить несанкционированный доступ к системе | CVSS3: 7.5 | 0% Низкий | больше 3 лет назад |
Уязвимостей на страницу