Unauthorized IODD File Upload due to Improper Authorization
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.1epss 0.6%
probabilidade de exploração
0.6%top 55% das CVEs
exploração observada
nãonenhuma fonte reporta
A low-privileged remote attacker can exploit improper authorization in the /index.php/attached_devices_tab/do_upload endpoint to upload IODD files to the device, potentially altering device behavior or causing system crashes.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Produtos afetados
Carlo Gavazzi Automation · YL212CEI8M1IOCarlo Gavazzi Automation · YL212CPN8M1IOCarlo Gavazzi Automation · YN115CEI8RPIOCarlo Gavazzi Automation · YN115CPN8RPIOPepperl+Fuchs · ICE2-8IOL1-G65L-V1DPepperl+Fuchs · ICE2-8IOL-G65L-V1DPepperl+Fuchs · ICE2-8IOL-K45P-RJ45Pepperl+Fuchs · ICE2-8IOL-K45S-RJ45Pepperl+Fuchs · ICE3-8IOL1-G65L-V1DPepperl+Fuchs · ICE3-8IOL-G65L-V1DPepperl+Fuchs · ICE3-8IOL-G65L-V1D-YPepperl+Fuchs · ICE3-8IOL-K45P-RJ45Pepperl+Fuchs · ICE3-8IOL-K45S-RJ45Phoenix Contact · IOL MA8 EIP DI8Phoenix Contact · IOL MA8 PN DI8