Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
EisBaer Scada records in CISA KEVNo EisBaer Scada vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 50
EisBaer Scada - CWE-749: Exposed Dangerous Method or Function
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00887 · Published 2023-10-25 · Fixed in Upgrade to the latest version. CWE-749
Priority MEDIUM 50
EisBaer Scada - CWE-732: Incorrect Permission Assignment for Critical Resource
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00821 · Published 2023-10-25 · Fixed in Upgrade to the latest version. CWE-732
Priority MEDIUM 44
EisBaer Scada - CWE-285: Improper Authorization
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00795 · Published 2023-10-25 · Fixed in Upgrade to the latest version. CWE-285
Priority MEDIUM 43
EisBaer Scada - CWE-256: Plaintext Storage of a Password
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00498 · Published 2023-10-25 · Fixed in Upgrade to the latest version. CWE-256
Priority MEDIUM 43
EisBaer Scada - CWE-321: Use of Hard-coded Cryptographic Key
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00498 · Published 2023-10-25 · Fixed in Upgrade to the latest version. CWE-321
Priority MEDIUM 41
EisBaer Scada - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00896 · Published 2023-10-25 · Fixed in Upgrade to the latest version. CWE-22
Priority MEDIUM 40
EisBaer Scada - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00776 · Published 2023-10-25 · Fixed in Upgrade to the latest version. CWE-200
Open these records in search →