sauter-controls kayıtları
sauter-controls üreticisine ait 11 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
- CWE-319 Cleartext Transmission of Sensitive Information2
- CWE-254 7PK - Security Features1
- CWE-306 Missing Authentication for Critical Function1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-611 Improper Restriction of XML External Entity Reference1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
11 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
38İzleyin | CVE-2022-40190İstismar yok | SAUTER Controls moduWeb firmware version 2.7.1 is vulnerable to reflective cross-site scripting (XSS).sauter-controls · moduweb firmware · CWE-79 | Kritik9,6 | — | %0,8 | 31 Eki 2022 |
35İzleyin | CVE-2023-0052İstismar yok | SAUTER Controls Nova 200–220 Series Missing Authentication for Critical Functionsauter-controls · nova 220 eyk220f001 firmware · CWE-306 | Yüksek8,8 | — | %0,7 | 20 Oca 2023 |
30İzleyin | CVE-2018-17912İstismar yok | An XXE vulnerability exists in CASE Suite Versions 3.10 and prior when processing parameter entities, which may allow remote file disclosuresauter-controls · case suite · CWE-611 | Yüksek7,5 | — | %1,6 | 2 Kas 2018 |
30İzleyin | CVE-2023-0053İstismar yok | SAUTER Controls Nova 200–220 Series Cleartext Transmission of Sensitive Informationsauter-controls · nova 220 eyk220f001 firmware · CWE-319 | Yüksek7,5 | — | %0,3 | 1 Mar 2023 |
28İzleyin | CVE-2016-10224İstismar yok | An issue was discovered in Sauter NovaWeb web HMI.sauter-controls · novaweb web hmi · CWE-254 | Yüksek7,2 | — | %1,1 | 13 Şub 2017 |
26İzleyin | CVE-2015-7916İstismar yok | Cross-site scripting (XSS) vulnerability in Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 allows remote authenticated users to inject arbisauter-controls · moduweb vision · CWE-79 | Orta6,5 | — | %0,7 | 6 Şub 2016 |
26İzleyin | CVE-2023-28652İstismar yok | An authenticated malicious user could successfully upload a malicious image could lead to a denial-of-service condition.sauter-controls · ey-as525f001 firmware · CWE-434 | Orta6,5 | — | %0,6 | 27 Mar 2023 |
26İzleyin | CVE-2023-27927İstismar yok | An authenticated malicious user could acquire the simple mail transfer protocol (SMTP) Password in cleartext format, despite it being protecsauter-controls · ey-as525f001 firmware · CWE-319 | Orta6,5 | — | %0,3 | 27 Mar 2023 |
24İzleyin | CVE-2023-22300İstismar yok | An unauthenticated remote attacker could force all authenticated users, such as administrative users, to perform unauthorized actions by viesauter-controls · ey-as525f001 firmware · CWE-79 | Orta6,1 | — | %0,5 | 27 Mar 2023 |
24İzleyin | CVE-2023-28650İstismar yok | An unauthenticated remote attacker could provide a malicious link and trick an unsuspecting user into clicking on it.sauter-controls · ey-as525f001 firmware · CWE-79 | Orta6,1 | — | %0,5 | 27 Mar 2023 |
21İzleyin | CVE-2023-28655İstismar yok | A malicious user could leverage this vulnerability to escalate privileges or perform unauthorized actions in the context of the targeted prisauter-controls · ey-as525f001 firmware · CWE-79 | Orta5,4 | — | %0,3 | 27 Mar 2023 |
- CVE-2022-4019038İzleyin
SAUTER Controls moduWeb firmware version 2.7.1 is vulnerable to reflective cross-site scripting (XSS).
KritikCVSS 9,6İstismar yokEPSS %0sauter-controls · moduweb firmware31 Eki 2022
- CVE-2023-005235İzleyin
SAUTER Controls Nova 200–220 Series Missing Authentication for Critical Function
YüksekCVSS 8,8İstismar yokEPSS %0sauter-controls · nova 220 eyk220f001 firmware20 Oca 2023
- CVE-2018-1791230İzleyin
An XXE vulnerability exists in CASE Suite Versions 3.10 and prior when processing parameter entities, which may allow remote file disclosure
YüksekCVSS 7,5İstismar yokEPSS %1sauter-controls · case suite2 Kas 2018
- CVE-2023-005330İzleyin
SAUTER Controls Nova 200–220 Series Cleartext Transmission of Sensitive Information
YüksekCVSS 7,5İstismar yokEPSS %0sauter-controls · nova 220 eyk220f001 firmware1 Mar 2023
- CVE-2016-1022428İzleyin
An issue was discovered in Sauter NovaWeb web HMI.
YüksekCVSS 7,2İstismar yokEPSS %1sauter-controls · novaweb web hmi13 Şub 2017
- CVE-2015-791626İzleyin
Cross-site scripting (XSS) vulnerability in Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 allows remote authenticated users to inject arbi
OrtaCVSS 6,5İstismar yokEPSS %0sauter-controls · moduweb vision6 Şub 2016
- CVE-2023-2865226İzleyin
An authenticated malicious user could successfully upload a malicious image could lead to a denial-of-service condition.
OrtaCVSS 6,5İstismar yokEPSS %0sauter-controls · ey-as525f001 firmware27 Mar 2023
- CVE-2023-2792726İzleyin
An authenticated malicious user could acquire the simple mail transfer protocol (SMTP) Password in cleartext format, despite it being protec
OrtaCVSS 6,5İstismar yokEPSS %0sauter-controls · ey-as525f001 firmware27 Mar 2023
- CVE-2023-2230024İzleyin
An unauthenticated remote attacker could force all authenticated users, such as administrative users, to perform unauthorized actions by vie
OrtaCVSS 6,1İstismar yokEPSS %0sauter-controls · ey-as525f001 firmware27 Mar 2023
- CVE-2023-2865024İzleyin
An unauthenticated remote attacker could provide a malicious link and trick an unsuspecting user into clicking on it.
OrtaCVSS 6,1İstismar yokEPSS %0sauter-controls · ey-as525f001 firmware27 Mar 2023
- CVE-2023-2865521İzleyin
A malicious user could leverage this vulnerability to escalate privileges or perform unauthorized actions in the context of the targeted pri
OrtaCVSS 5,4İstismar yokEPSS %0sauter-controls · ey-as525f001 firmware27 Mar 2023