PT-2023-21846 · Omicron · Omicron Stationscout+1

Hendrik Schwartke · Published 2023-03-23 · Updated 2025-02-25 · CVE-2023-28611

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OMICRON StationGuard versions 1.10 through 2.20 OMICRON StationScout versions 1.30 through 2.20

Description The issue allows an attacker to bypass intended access restrictions due to incorrect authorization.

Recommendations For OMICRON StationGuard versions 1.10 through 2.20, update to a version that addresses the incorrect authorization issue. For OMICRON StationScout versions 1.30 through 2.20, update to a version that addresses the incorrect authorization issue.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2023-28611

Affected Products

Omicron Stationguard

Omicron Stationscout

References · 6

• https://osv.dev/vulnerability/CVE-2023-28611 · Vendor Advisory
• https://omicronenergy.com/en/support/product-security · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-28611 · Security Note
• https://omicronenergy.com/fileadmin/user_upload/website/files/product-security/osa-6.txt · Vendor Advisory
• https://t.me/cvenotify/112469 · Telegram Post
• https://t.me/cibsecurity/60619 · Telegram Post