Atlas Copco Power Focus 6000
Successful exploitation of these vulnerabilities could cause a loss of sensitive information and the takeover of a user's active session.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-1899US | high7.5OT erhöht | — | ||
Atlas Copco Power Focus 6000 web server is not a secure connection by default, which could allow an attacker to gain sensitive information by monitoring network traffic between use… | ||||
| CVE-2023-1898US | high7.5OT erhöht | — | ||
Atlas Copco Power Focus 6000 web server uses a small amount of session ID numbers. An attacker could enter a session ID number to retrieve data for an active user’s session. | ||||
| CVE-2023-1897US | high7.5OT erhöht | — | ||
Atlas Copco Power Focus 6000 web server does not sanitize the login information stored by the authenticated user’s browser, which could allow an attacker with access to the user’s… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Recommended Practicesexternal
- ICS Advisory ICSA-23-159-01 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-159-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (3)
- BehobenPower Focus 6000
Atlas Copco has not responded to requests to work with CISA on mitigations for the reported vulnerabilities. Users of the affected products are encouraged to contact Atlas Copco.
https://www.atlascopco.com/en-us/itba/us-contact - BehobenPower Focus 6000
Atlas Copco has not responded to requests to work with CISA on mitigations for the reported vulnerabilities. Users of the affected products are encouraged to contact Atlas Copco.
https://www.atlascopco.com/en-us/itba/us-contact - BehobenPower Focus 6000
Atlas Copco has not responded to requests to work with CISA on mitigations for the reported vulnerabilities. Users of the affected products are encouraged to contact Atlas Copco.
https://www.atlascopco.com/en-us/itba/us-contact
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan