| |
Vulnerability CVE-2021-22784
Published: 2021-07-21
| Description: |
A CWE-306: Missing Authentication for Critical Function vulnerability exists in C-Bus Toolkit v1.15.8 and prior that could allow an attacker to use a crafted webpage to obtain remote access to the system. |
Type:
CWE-306 (Missing Authentication for Critical Function)
CVSS2 => (AV:N/AC:M/Au:N/C:N/I:P/A:N)
| CVSS Base Score |
Impact Subscore |
Exploitability Subscore |
4.3/10 |
2.9/10 |
8.6/10 |
| Exploit range |
Attack complexity |
Authentication |
Remote |
Medium |
No required |
| Confidentiality impact |
Integrity impact |
Availability impact |
None |
Partial |
None |
References: |
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-04
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
