CVE-2023-3271 in ICR890-4

摘要

由 MITRE • 2023-07-10

Improper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to gather information about the system and download data via the REST API by accessing unauthenticated endpoints.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• 负责: SICK AG
• 预定: 2023-06-15
• 披露: 2023-07-10
• 管理: 已接受
• 条目: VDB-233428
• CPE: 准备好
• CWE: CWE-284 (已确认)
• CVSS: 7.5 (NVD)
• EPSS: 0.00260
• KEV: 否
• 活动: 非常低

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-3271
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-3271
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-3271/