Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-58679
HistoryMay 26, 2022 - 12:00 a.m.

Open Automation Software OAS Platform Access Control Error Vulnerability (CNVD-2022-58679)

2022-05-2600:00:00
China National Vulnerability Database
www.cnvd.org.cn
14
industrial iot suite
open automation software
vulnerability
access control
rest api
http request

EPSS

0.017

Percentile

87.7%

Open Automation Software OAS Platform is an industrial Internet of Things (IoT) suite from Open Automation Software, Inc. Open Automation Software OAS Platform V16.00.0121 is vulnerable to an access control error that could be exploited by an attacker to make unauthenticated use of the REST API with a specially crafted HTTP request.

EPSS

0.017

Percentile

87.7%