CVE-2022-2474 in Controllerthông tin

Tóm tắt

Bởi MITRE • 29/10/2022

Authentication is currently unsupported in Haas Controller version 100.20.000.1110 when using the “Ethernet Q Commands” service, which allows any user on the same network segment as the controller (even while connected remotely) to access the service and write unauthorized macros to the device.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

chịu trách nhiệm

ICS-CERT

Đặt trước

19/07/2022

Tiết lộ

29/10/2022

Kiểm duyệt

được chấp nhận

EPSS

0.00673

KEV

không

Các hoạt động

rất thấp

Nguồn

Want to know what is going to be exploited?

We predict KEV entries!