Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-4985
HistorySep 15, 2023 - 3:15 p.m.

Authentication flaw

2023-09-1515:15:00
PRIOn knowledge base
www.prio-n.com
5
vulnerability
supcon inplant scada
project.xml
improper authentication
local attack
exploit disclosure
vdb-239796
vendor notification ignored

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

A vulnerability classified as critical has been found in Supcon InPlant SCADA up to 20230901. Affected is an unknown function of the file Project.xml. The manipulation leads to improper authentication. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-239796. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

CPENameOperatorVersion
inplant_scadale20230901

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Related for PRION:CVE-2023-4985