Vulnerabilities

TI-2023-22656 CVE-2023-42494 · GHSA-pqfh-r9h2-3rx3

EisBaer Scada - CWE-749: Exposed Dangerous Method or Function

MEDIUM 50

EisBaer Scada - CWE-749: Exposed Dangerous Method or Function

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00887 Published 2023-10-25 Fixed in Upgrade to the latest version. CWE-749

TI-2023-22655 CVE-2023-42493 · GHSA-6mq5-fg4v-q2mg

MEDIUM 43

EisBaer Scada - CWE-256: Plaintext Storage of a Password

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00498 Published 2023-10-25 Fixed in Upgrade to the latest version. CWE-256

TI-2023-22654 CVE-2023-42492 · GHSA-h7m9-mjxp-hhhv

MEDIUM 43

EisBaer Scada - CWE-321: Use of Hard-coded Cryptographic Key

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00498 Published 2023-10-25 Fixed in Upgrade to the latest version. CWE-321

TI-2023-22652 CVE-2023-42490 · GHSA-q74x-62w7-247x

MEDIUM 40

EisBaer Scada - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00776 Published 2023-10-25 Fixed in Upgrade to the latest version. CWE-200

TI-2023-22651 CVE-2023-42489 · GHSA-9j49-grxx-rp3c

MEDIUM 50

EisBaer Scada - CWE-732: Incorrect Permission Assignment for Critical Resource

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00821 Published 2023-10-25 Fixed in Upgrade to the latest version. CWE-732

TI-2023-22650 CVE-2023-42488 · GHSA-q73g-73qw-2px5

MEDIUM 41

EisBaer Scada - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00896 Published 2023-10-25 Fixed in Upgrade to the latest version. CWE-22

TI-2023-22653 CVE-2023-42491 · GHSA-pjh7-f93r-qfrc

MEDIUM 44

EisBaer Scada - CWE-285: Improper Authorization

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00795 Published 2023-10-25 Fixed in Upgrade to the latest version. CWE-285