PT-2024-7542 · Unknown · Workstation

Published 2024-09-24 · Updated 2024-09-24

Positive Technologies (AI Summary)

CVSS v2.0

9.7

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:P

Name of the Vulnerable Software and Affected Versions WorkstationST (affected versions not specified)

Description The issue is related to a lack of authentication for a critical function in the OPC server. This could allow a remote attacker to read or overwrite files on the configuration server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

BDU:2024-08939

Affected Products

Workstation

References · 2

• https://bdu.fstec.ru/vul/2024-08939 · Security Note
• https://gevernova.com/content/dam/cyber_security/global/en_US/pdfs/2024-09-24_EGD_Config_Server_File_Overwrite.pdf · Note