SUBNET PowerSYSTEM Center
Advisory ansehen veröffentlicht 2023-06-15
Successful exploitation of these vulnerabilities could allow an attacker to upload malicious scripts or perform a denial-of-service type attack.
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-32659US | medium6.1 | — | ||
SUBNET PowerSYSTEM Center versions 2020 U10 and prior contain a cross-site scripting vulnerability that may allow an attacker to inject malicious code into report header graphic f… | ||||
| CVE-2023-29158US | critical9.1OT erhöht | — | ||
SUBNET PowerSYSTEM Center versions 2020 U10 and prior are vulnerable to replay attacks which may result in a denial-of-service condition or a loss of data integrity.
| ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-23-166-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-166-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- BehobenPowerSYSTEM Center
Deny users to run other executables on client access servers (PowerSYSTEM Center front end access point).
- BehobenPowerSYSTEM Center
Deny users to run other executables on client access servers (PowerSYSTEM Center front end access point).
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan