CVE-2020-26868: falha de alta gravidade em ARC Informatique PcVue
ARC Informatique PcVue Access to Critical Private Variable via Public Method
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.5epss 2.2%
ARC Informatique PcVue prior to version 12.0.17 is vulnerable to a denial-of-service attack due to the ability of an unauthorized user to modify information used to validate messages sent by legitimate web clients. This issue also affects third-party systems based on the Web Services Toolkit.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
ARC Informatique · PcVueCVEs relacionadas — ARC Informatique PcVue
No mesmo produto, das mais perigosas para as menos.
Referências
https://ics-cert.kaspersky.com/advisories/klcert-advisories/2020/10/09/klcert-20-016-denial-of-service-in-arc-informatique-pcvue/https://us-cert.cisa.gov/ics/advisories/icsa-20-308-03https://www.pcvuesolutions.com/securityhttps://www.pcvuesolutions.com/support/index.php/en/security-bulletin/1076-security-bulletin-2020-1