提交 #202313: Supcon's InPlant SCADA product has an engineering file password bypass vulnerability信息

标题Supcon's InPlant SCADA product has an engineering file password bypass vulnerability
描述Supcon's InPlant SCADA product has an engineering file password bypass vulnerability, which is an industrial control SCADA software produced by China's Supcon company; This software can set passwords when creating project files, but the passwords are stored in MD5 format in the Project.xml and/Users/userini files under the project file directory. By modifying or canceling the password field content in these two configuration files, password restrictions can be bypassed
来源⚠️ https://drive.google.com/file/d/1V_O95QddCGdZzYGgx7tkMOYQ5i_alv69/view?usp=drive_link
用户
 01dgu0 (UID 53763)
提交2023-09-01 10時25分 (3 年前)
管理2023-09-15 08時20分 (14 days later)
状态已接受
VulDB条目239797 [Supcon InPlant SCADA 直到 20230901 Project.xml 弱加密]
积分20

Do you know our Splunk app?

Download it now for free!