VDB
BDU%3A2023-03539
BDU%3A2023-03539
PUBLISHED
CVSS 10 CRITICAL
Уязвимость реализации протокола связи TCP/IP среды разработки приложений для программируемых логических контроллеров ISaGRAF Workbench, позволяющая нарушителю загружать, читать и удалять файлы
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Schneider Electric, Rockwell Automation Inc., Xylem Inc. | MiCOM C264, Easergy C5, PACiS GTW, EPAS GTW, SCD2200 CP-3, SCD2200 MC-31, Saitel DR, AADvance Controller, ISaGRAF6 Workbench, Micro810, Micro820, Micro830, Micro850, Micro870, MultiSmart, SCADAPack 300E RTU, SCADAPack 53xE RTU, SCADAPack Workbench, SAGE RTU - C3414 CPU, SAGE RTU - C3413 CPU, Easergy T300, Talus T4e RTU, Talus T4c RTU, ISaGRAF Runtime, Saitel DP |
Timeline
- Jul 4, 2023 CVE Published
References
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-04 url
- https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131699 url
- https://www.cisa.gov/uscert/ics/advisories/icsa-20-280-01 url
- https://www.xylem.com/siteassets/about-xylem/cybersecurity/advisories/xylem-multismart-rockwell-isagraf.pdf url
- https://vuldb.com/?id.195460 url