PT-2024-19104
CVE-2024-21870
·
تاريخ النشر
2024-04-03
·
تاريخ التحديث
2024-04-03
الوصف من
CVSS 3.1
4.9
متوسطةالمقاييسAV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Open Automation Software OAS Platform version 19.00.0057
Description
A file write issue exists in the OAS Engine Tags Configuration functionality. This can be exploited by sending a specially crafted series of network requests, leading to arbitrary file creation or overwrite.
Recommendations
For version 19.00.0057, consider restricting access to the OAS Engine Tags Configuration functionality until a fix is available. As a temporary workaround, monitor network requests to detect and prevent potential exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾