PT-2016-3037 · Овен · Плк110
Publicado
2016-07-07
·
Atualizado
2016-07-07
CVSS v2.0
3.5
Baixa
| Vetor | AV:N/AC:M/Au:S/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
ОВЕН ПЛК110 (affected versions not specified)
Description
The issue is related to the lack of restrictions on the length of file names that can be written. This could allow a remote attacker to save files in the file system that cannot be deleted using the controller's standard tools due to the 60-character limit for console commands and 80-character limit for CODESYS requests and library function calls from the control program.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Плк110