CVE-2022-29966: Emerson Ovation, заобикаляне на вход и права

Описание

Оригинално описание

Emerson Ovation has several protocols that have no authentication, which could allow an attacker to change controller configuration or cause a denial-of-service condition.

Засегнати продукти

• Emerson Ovation: до Version 3.8.0 Feature Pack 1; 3.8.0 Feature Pack 3

Вид слабост

• CWE-306 Липсваща автентикация за критична функционалност

История

Други уязвимости в Emerson Ovation

• 8.7CVE-2022-30267

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2022-29966
• https://nvd.nist.gov/vuln/detail/CVE-2022-29966
• https://www.cisa.gov/news-events/ics-advisories/icsa-24-158-02
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2024/icsa-24-158-02.json