PT-2023-1715 · Inscada · Inscada

Published 2023-03-06 · Updated 2024-02-01 · CVE-2023-0839

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions inSCADA versions before 20230115-1

Description The issue is related to improper protection for outbound error messages and alert signals in inSCADA, allowing account footprinting. This could potentially impact the confidentiality, integrity, and availability of protected information.

Recommendations For versions before 20230115-1, update to a version 20230115-1 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-1320

Related Identifiers

BDU:2023-01294

CVE-2023-0839

Affected Products

Inscada

References · 11

• https://bdu.fstec.ru/vul/2023-01294 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-0839 · Security Note
• https://osv.dev/vulnerability/CVE-2023-0839 · Vendor Advisory
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0127 · Note
• https://t.me/cvenotify/45586 · Telegram Post
• https://t.me/cibsecurity/59464 · Telegram Post
• https://t.me/cvenotify/46896 · Telegram Post
• https://vuldb.com/?id.222367 · Note
• https://t.me/cvenotify/69573 · Telegram Post
• https://usom.gov.tr/bildirim/tr-23-0127 · Note
• https://t.me/cvenotify/46221 · Telegram Post