PT-2026-106361 · Unknown · Aas Edge Client
CVSS v3.1
9.8
حرجة
| المتجه | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
AAS edge client (affected versions not specified)
Description
An unauthenticated remote attacker can modify Asset Administration Shell submodel data through PATCH requests and read all exposed data via GET endpoints. This issue occurs via a REST API on port 18000, allowing unauthorized read and write access to industrial submodel data.
Recommendations
Decommission the AAS edge client.
إصلاح
Missing Authentication
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
تصنيف نقاط الضعف
المعرّفات ذات الصلة
المنتجات المتأثرة
Aas Edge Client