PT-2018-2153 · Tenix · Tenix
Publicado
2018-09-02
·
Atualizado
2018-09-02
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
TeNIX (affected versions not specified)
Description
The issue is related to the lack of an authentication procedure in the pnp-save.sh service of the TeNIX operating system used in МФК1500 and МФК3000 programmable logic controllers. This allows a remote attacker to read data saved by other users from the /tenix/data/pnp/other.tar file by accessing the pnp-save.sh service without undergoing an authentication process.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Missing Authentication
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Tenix