CVE-2023-3271 in ICR890-4

الملخص

بحسب MITRE • 10/07/2023

Improper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to gather information about the system and download data via the REST API by accessing unauthenticated endpoints.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• مسؤول: SICK AG
• حجز: 15/06/2023
• إفشاء: 10/07/2023
• الاعتدال: تمت الموافقة
• إدخال: VDB-233428
• CPE: جاهز
• CWE: CWE-284 (مؤكد)
• CVSS: 7.5 (NVD)
• EPSS: 0.00260
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-3271
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-3271
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-3271/