CVE-2024-10083: falha de média gravidade em Schneider Electric Uni-Telway driver
Publicada em
Seguir esta CVE+ Monitorar Uni-Telway driver+ Monitorar Uni-Telway driver used in EcoStruxure Control Expert
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.8epss 0.2%
CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of engineering
workstation when specific driver interface is invoked locally by an authenticated user with crafted input.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Schneider Electric · Uni-Telway driverSchneider Electric · Uni-Telway driver used in EcoStruxure Control ExpertSchneider Electric · Uni-Telway driver used in EcoStruxure Process ExpertSchneider Electric · Uni-Telway driver used in EcoStruxure Process Expert for AVEVA System PlatformSchneider Electric · Uni-Telway driver used in OPC Factory Server