A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 1). An authenticated remote attacker with access to the Web Based Management (443/tcp) of the affected product, could potentially read and write arbitrary files from and to the device's file system. An attacker might leverage this to trigger remote code execution on the affected component.
oryginał ENCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HSiemens Sinec Ins
APPSiemens1.0< 1.0
Powiązane podatności
Command injection w Siemens SINEC INS – wykonanie kodu na systemie operacyjnym
Path Traversal w SINEC INS umożliwia RCE przez SFTP
A weak randomness in WebCrypto keygen vulnerability exists in Node.js 18 due to a change with EntropySource() ...
When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep...
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can ...