PT-2025-3437 · Unknown · Safety Production Process Management System
CVE-2024-57395
·
Publicado
2025-01-29
·
Atualizado
2025-01-31
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Safety production process management system version 1.0
Description
The issue allows a remote attacker to escalate privileges, execute arbitrary code, and obtain sensitive information via the
password and account number parameters.Recommendations
For Safety production process management system version 1.0, consider temporarily restricting access to the system until a patch is available. As a temporary workaround, avoid using the
password and account number parameters in sensitive operations. At the moment, there is no information about a newer version that contains a fix for this issue.Correção
RCE
Insufficiently Protected Credentials
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Safety Production Process Management System