Количество 3
Количество 3
CVE-2023-46290
Due to inadequate code logic, a previously unauthenticated threat actor could potentially obtain a local Windows OS user token through the FactoryTalk® Services Platform web service and then use the token to log in into FactoryTalk® Services Platform . This vulnerability can only be exploited if the authorized user did not previously log in into the FactoryTalk® Services Platform web service.
GHSA-5gjm-5h8m-h8w7
Due to inadequate code logic, a previously unauthenticated threat actor could potentially obtain a local Windows OS user token through the FactoryTalk® Services Platform web service and then use the token to log in into FactoryTalk® Services Platform . This vulnerability can only be exploited if the authorized user did not previously log in into the FactoryTalk® Services Platform web service.
BDU:2023-08627
Уязвимость программного обеспечения управления производственными процессами FactoryTalk Services Platform, связанная с недостатками процедуры аутентификации, позволяющая нарушителю обойти процесс аутентификации и получить полный доступ к устройству
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-46290 Due to inadequate code logic, a previously unauthenticated threat actor could potentially obtain a local Windows OS user token through the FactoryTalk® Services Platform web service and then use the token to log in into FactoryTalk® Services Platform . This vulnerability can only be exploited if the authorized user did not previously log in into the FactoryTalk® Services Platform web service. | CVSS3: 8.1 | 0% Низкий | больше 2 лет назад |
| GHSA-5gjm-5h8m-h8w7 Due to inadequate code logic, a previously unauthenticated threat actor could potentially obtain a local Windows OS user token through the FactoryTalk® Services Platform web service and then use the token to log in into FactoryTalk® Services Platform . This vulnerability can only be exploited if the authorized user did not previously log in into the FactoryTalk® Services Platform web service. | CVSS3: 8.1 | 0% Низкий | больше 2 лет назад |
 | BDU:2023-08627 Уязвимость программного обеспечения управления производственными процессами FactoryTalk Services Platform, связанная с недостатками процедуры аутентификации, позволяющая нарушителю обойти процесс аутентификации и получить полный доступ к устройству | CVSS3: 8.1 | 0% Низкий | больше 2 лет назад |
Уязвимостей на страницу