| |
Vulnerability CVE-2019-13550
Published: 2019-09-18
| Description: |
In WebAccess, versions 8.4.1 and prior, an improper authorization vulnerability may allow an attacker to disclose sensitive information, cause improper control of generation of code, which may allow remote code execution or cause a system crash. |
Type:
CWE-863 (Incorrect Authorization)
CVSS2 => (AV:N/AC:L/Au:N/C:P/I:P/A:C)
| CVSS Base Score |
Impact Subscore |
Exploitability Subscore |
9/10 |
8.5/10 |
10/10 |
| Exploit range |
Attack complexity |
Authentication |
Remote |
Low |
No required |
| Confidentiality impact |
Integrity impact |
Availability impact |
Partial |
Partial |
Complete |
References: |
https://www.us-cert.gov/ics/advisories/icsa-19-260-01
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
