CVE-2026-58477: fallo de gravedad alta en Dan-in-CA SIP
Sustainable Irrigation Platform 5.2.16 Mass Assignment via HTTP Parameters
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
41Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendcvss 8.8epss 0.5%
Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a mass assignment vulnerability that allows unauthenticated attackers to overwrite sensitive configuration settings by supplying arbitrary parameter names in HTTP requests. Attackers can manipulate parameters corresponding to sensitive values such as the passphrase and listening port, and can also achieve the same result through cross-site request forgery due to the absence of adequate request validation.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N
Productos afectados
Dan-in-CA · SIPPoCs públicas encontradas — 1
cve_referencewww.zeroscience.mk/#/advisories/ZSL-2026-5997no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — Dan-in-CA SIP
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-58479CRITICALSustainable Irrigation Platform 5.2.16 RCE via cli_control Plugin Command InjectionEPSS 4.4%CVE-2026-60114HIGHSustainable Irrigation Platform 5.2.16 Path Traversal via JSON Backup RestoreEPSS 0.5%CVE-2026-58478MEDIUMSustainable Irrigation Platform 5.2.16 SSRF via Node-RED Callback URLEPSS 0.4%CVE-2026-58475MEDIUMSustainable Irrigation Platform 5.2.16 Stored XSS via Program NameEPSS 0.3%CVE-2026-58476HIGHSustainable Irrigation Platform 5.2.16 CSRF via Administrative GET RequestsEPSS 0.3%