CVE-2024-21870

Name of the Vulnerable Software and Affected Versions Open Automation Software OAS Platform version 19.00.0057

Description A file write issue exists in the OAS Engine Tags Configuration functionality. This can be exploited by sending a specially crafted series of network requests, leading to arbitrary file creation or overwrite.

Recommendations For version 19.00.0057, consider restricting access to the OAS Engine Tags Configuration functionality until a fix is available. As a temporary workaround, monitor network requests to detect and prevent potential exploitation.