Summary
Successful exploitation of these vulnerabilities could allow an unauthorized user to leak login credentials and download files. In some circumstances, an unauthorized user can use login credentials to achieve remote code execution.
Vulnerabilities 2
-
High 8.2
RONDS EPM version 1.19.5 does not properly validate the filename parameter, which could allow an unauthorized user to s…
-
High 7.5
RONDS EPM version 1.19.5 has a vulnerability in which a function could allow unauthenticated users to leak credentials.…
Revision history
-
#1
Publication Date
References
-
ICS Advisory ICSA-23-012-02 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-23-012-02
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf