PT-2018-2153 · Tenix · Tenix
Published
2018-09-02
·
Updated
2018-09-02
CVSS v2.0
5.0
Medium
| Vector | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
TeNIX (affected versions not specified)
Description
The issue is related to the lack of an authentication procedure in the pnp-save.sh service of the TeNIX operating system used in МФК1500 and МФК3000 programmable logic controllers. This allows a remote attacker to read data saved by other users from the /tenix/data/pnp/other.tar file by accessing the pnp-save.sh service without undergoing an authentication process.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Missing Authentication
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Tenix