Lucene search
China National Vulnerability DatabaseCNVD-2022-58683HistoryMay 26, 2022 - 12:00 a.m.
Open Automation Software OAS Platform信息泄露漏洞
2022-05-2600:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
automation software oas
industrial iot suite
information disclosure
version v16.00.0112
oas engine entransferfiles
network requests
arbitrary files
security vulnerability
EPSS
0.002
Percentile
58.7%
Open Automation Software OAS Platform is an industrial Internet of Things (IoT) suite from Open Automation Software, Inc. An information disclosure vulnerability exists in Open Automation Software OAS Platform version V16.00.0112, which stems from an information disclosure issue in the OAS Engine Entransferfiles feature that could be exploited by an attacker by sending a series of special network requests to read arbitrary files.
Related
prion
prion
Information disclosure
2022-05-25 21:15:00
cve
cve
CVE-2022-26067
2022-05-25 21:15:08
cvelist
cvelist
CVE-2022-26067
2022-05-25 20:15:22
talos
talos
nvd
nvd
CVE-2022-26067
2022-05-25 21:15:08
threatpost
threatpost
Critical Flaws in Popular ICS Platform Can Trigger RCE
2022-05-27 10:32:07