PT-2016-3037 · Овен · Плк110
Published
2016-07-07
·
Updated
2016-07-07
CVSS v2.0
3.5
Low
| Vector | AV:N/AC:M/Au:S/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
ОВЕН ПЛК110 (affected versions not specified)
Description
The issue is related to the lack of restrictions on the length of file names that can be written. This could allow a remote attacker to save files in the file system that cannot be deleted using the controller's standard tools due to the 60-character limit for console commands and 80-character limit for CODESYS requests and library function calls from the control program.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Плк110