PT-2023-21846 · Omicron · Omicron Stationscout+1

Hendrik Schwartke · Publicado 2023-03-23 · Atualizado 2025-02-25 · CVE-2023-28611

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OMICRON StationGuard versions 1.10 through 2.20 OMICRON StationScout versions 1.30 through 2.20

Description The issue allows an attacker to bypass intended access restrictions due to incorrect authorization.

Recommendations For OMICRON StationGuard versions 1.10 through 2.20, update to a version that addresses the incorrect authorization issue. For OMICRON StationScout versions 1.30 through 2.20, update to a version that addresses the incorrect authorization issue.

Correção

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

CVE-2023-28611

Produtos afetados

Omicron Stationguard

Omicron Stationscout

Referências · 6

• https://osv.dev/vulnerability/CVE-2023-28611 · Aviso do Fabricante
• https://omicronenergy.com/en/support/product-security · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-28611 · Nota de Segurança
• https://omicronenergy.com/fileadmin/user_upload/website/files/product-security/osa-6.txt · Aviso do Fabricante
• https://t.me/cvenotify/112469 · Publicação no Telegram
• https://t.me/cibsecurity/60619 · Publicação no Telegram