Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2013-2762
schneider electric
magelis xbt
hmi controller
default password
authentication
configuration uploads
remote attackers
access restrictions
crafted configuration data.
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.3 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
45.3%
The Schneider Electric Magelis XBT HMI controller has a default password for authentication of configuration uploads, which makes it easier for remote attackers to bypass intended access restrictions via crafted configuration data.
Affected configurations
Node
schneider-electricmagelis_xbt_hmiMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| schneider-electric:magelis_xbt_hmi | schneider-electric magelis xbt hmi | eq | - |
Related
nvd
nvd
CVE-2013-2762
2013-04-04 11:58:49
prion
prion
Default credentials
2013-04-04 11:58:00
cvelist
cvelist
CVE-2013-2762
2022-10-03 16:15:01
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.3 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
45.3%
Related for CVE-2013-2762