PT-2023-9245 · Unknown · Masterscada
Published
2023-12-12
·
Updated
2023-12-12
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
MasterSCADA version 4D
Description
The issue is related to weaknesses in the authorization procedure of the SCADA system. Exploitation of this issue may allow a remote attacker to read and write arbitrary files.
Recommendations
For MasterSCADA version 4D, consider restricting access to sensitive files and directories as a temporary workaround until a patch is available. Additionally, review and strengthen the authorization procedure to prevent unauthorized access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Improper Authorization
Missing Authentication
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Masterscada