PT-2014-2637
CVE-2013-2826
·
تاريخ النشر
2014-01-15
·
تاريخ التحديث
2014-02-05
الوصف من
CVSS 2.0
6.4
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
WellinTech KingSCADA versions prior to 3.1.2
WellinTech KingAlarm&Event versions prior to 3.1
WellinTech KingGraphic versions prior to 3.1.2
Description
The issue allows remote attackers to bypass intended access restrictions and discover credentials via a crafted packet to TCP port 8130, due to authentication being performed on the KAEClientManager console rather than on the server.
Recommendations
For WellinTech KingSCADA versions prior to 3.1.2, update to version 3.1.2 or later.
For WellinTech KingAlarm&Event versions prior to 3.1, update to version 3.1 or later.
For WellinTech KingGraphic versions prior to 3.1.2, update to version 3.1.2 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾