Lucene search
IcscertCVELIST:CVE-2024-8310HistorySep 27, 2024 - 4:33 p.m.
CVE-2024-8310 OPW Fuel Management Systems SiteSentinel Missing Authentication for Critical Function
2024-09-2716:33:39
CWE-306
icscert
www.cve.org
1
opw fuel management systems
sitesentinel
missing authentication
server
admin privileges
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
9.6%
OPW Fuel Management Systems SiteSentinel
could allow an attacker to bypass authentication to the server and obtain full admin privileges.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "SiteSentinel",
"vendor": "OPW Fuel Managements Systems",
"versions": [
{
"lessThan": "17Q2.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2024-8310
2024-09-27 17:15:13
cve
cve
CVE-2024-8310
2024-09-27 17:15:13
vulnrichment
vulnrichment
ics
ics
OPW Fuel Management Systems SiteSentinel
2024-09-24 12:00:00
thn
thn
Critical Flaws in Tank Gauge Systems Expose Gas Stations to Remote Attacks
2024-09-30 11:55:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
9.6%
Related for CVELIST:CVE-2024-8310