PT-2023-1715 · Inscada · Inscada

CVE-2023-0839 · Publicado 2023-03-06 · Atualizado 2024-02-01

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions inSCADA versions before 20230115-1

Description The issue is related to improper protection for outbound error messages and alert signals in inSCADA, allowing account footprinting. This could potentially impact the confidentiality, integrity, and availability of protected information.

Recommendations For versions before 20230115-1, update to a version 20230115-1 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-1320

Identificadores relacionados

BDU:2023-01294

CVE-2023-0839

Produtos afetados

Inscada

Referências · 11

• https://bdu.fstec.ru/vul/2023-01294 · Nota de Segurança
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0127 · Nota
• https://t.me/cvenotify/45586 · Publicação no Telegram
• https://t.me/cibsecurity/59464 · Publicação no Telegram
• https://t.me/cvenotify/46896 · Publicação no Telegram
• https://vuldb.com/?id.222367 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-0839 · Nota de Segurança
• https://t.me/cvenotify/69573 · Publicação no Telegram
• https://usom.gov.tr/bildirim/tr-23-0127 · Nota
• https://t.me/cvenotify/46221 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-0839 · Aviso do Fabricante