PT-2020-19319
CVE-2020-6971
·
تاريخ النشر
2020-03-05
·
تاريخ التحديث
2020-03-09
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Emerson ValveLink versions 12.0.264 through 13.4.118
Description
A vulnerability in the ValveLink software may allow a local, unprivileged, trusted insider to escalate privileges due to insecure configuration parameters.
Recommendations
For Emerson ValveLink versions 12.0.264 through 13.4.118, consider reconfiguring the software to secure configuration parameters until a patch is available.
As a temporary workaround, restrict access to the ValveLink software to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾