PT-2023-9245 · Unknown · Masterscada
Publicado
2023-12-12
·
Atualizado
2023-12-12
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
MasterSCADA version 4D
Description
The issue is related to weaknesses in the authorization procedure of the SCADA system. Exploitation of this issue may allow a remote attacker to read and write arbitrary files.
Recommendations
For MasterSCADA version 4D, consider restricting access to sensitive files and directories as a temporary workaround until a patch is available. Additionally, review and strengthen the authorization procedure to prevent unauthorized access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Improper Authorization
Missing Authentication
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Masterscada