Description
Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 through 2.10.2 on Linux contains an Improper Authentication vulnerability (CWE-287) in the system configuration module.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Nefteprodukttekhnika | BUK TS-G Gas Station Automation System | 2.9.1 – ≤ 2.10.2 | — |
References
- BUK_TS_KILLER - Proof-of-concept exploit for the BUK TS-G authentication bypass exploit third-party-advisory
- Nefteprodukttekhnika BUK TS-G - Vendor distribution vendor-advisory
- CWE-287: Improper Authentication technical-description
- CWE-306: Missing Authentication for Critical Function technical-description