ICSA-26-050-02

Valmet DNA Engineering Web Tools

Advisory ansehen veröffentlicht 2026-02-19

Successful exploitation of this vulnerability could allow an unauthenticated attacker to manipulate the web maintenance services URL to achieve arbitrary file read access.

beschreibt (1)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2025-15577US	high7.5	0.57% (47th)	—	2026-02-12
An unauthenticated attacker can exploit this vulnerability by manipulating URL to achieve arbitrary file read access.This issue affects Valmet DNA Web Tools: C2022 and older.

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

ICS Advisory ICSA-26-050-02 JSONself
ICSA Advisory ICSA-26-050-02 - Web Versionself
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal

Behebungen (1)

MitigationValmet DNA Engineering Web Tools
For additional information, refer to Valmet's security advisory regarding this issue: https://www.valmet.com/company/innovation/advisories/CVE-2025-15577/.
https://www.valmet.com/company/innovation/advisories/CVE-2025-15577/

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan