Lucene search
HistoryFeb 14, 2024 - 5:15 p.m.
CVE-2023-6409
cwe-798
unauthorized access
project file protection
application password
ecostruxure control expert
7.7 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
0.0004 Low
EPSS
Percentile
9.2%
CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorized
access to a project file protected with application password when opening the file with
EcoStruxure Control Expert.
Related
prion
prion
Hardcoded credentials
2024-02-14 17:15:00
cve
cve
CVE-2023-6409
2024-02-14 17:15:11
cvelist
cvelist
CVE-2023-6409
2024-02-14 16:47:05
7.7 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
0.0004 Low
EPSS
Percentile
9.2%
Related for NVD:CVE-2023-6409