CVE-2022-1989

CODESYS Visualization vulnerable to user enumeration

CVSS 5.3 MEDIUMEPSS 0.7%CWE-204

All CODESYS Visualization versions before V4.2.0.0 generate a login dialog vulnerable to information exposure allowing a remote, unauthenticated attacker to enumerate valid users.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Produtos afetados

CODESYS · CODESYS Visualization

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17142&token=a3696ab41fef800d2eaee8043d40d5fbe94277fd&download=