ICSA-22-181-04

Distributed Data Systems WebHMI

Advisory ansehen veröffentlicht 2022-06-30

Successful exploitation of these vulnerabilities could allow a user with administrative privileges in WebHMI to execute arbitrary OS commands or impact other logged in users.

beschreibt (2)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2022-2254US	medium4.8	0.50% (43rd)	—	2022-07-01
A user with administrative privileges in Distributed Data Systems WebHMI 4.1.1.7662 can store a script that could impact other logged in users.
CVE-2022-2253US	critical9.1	1.22% (69th)	—	2022-07-01
A user with administrative privileges in Distributed Data Systems WebHMI 4.1.1.7662 may send OS commands to execute on the host server.

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

ICS Advisory ICSA-22-181-04 JSONself
ICS Advisory ICSA-22-181-04 Web Versionself
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal

Behebungen (2)

MitigationWebHMI
Contact Distributed Data Systems for additional details regarding these vulnerabilities and their mitigations.
http://webhmi.com.ua/en/contact-us-en/
MitigationWebHMI
Contact Distributed Data Systems for additional details regarding these vulnerabilities and their mitigations.
http://webhmi.com.ua/en/contact-us-en/

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan