Lucene search

VulDBCVE-2023-6100

HistoryNov 13, 2023 - 4:15 p.m.

CVE-2023-6100

2023-11-1316:15:28

CWE-200

VulDB

web.nvd.nist.gov

cve-2023-6100

maiwei safety

production control platform

vulnerability

information disclosure

remote attack

code manipulation

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

23.1%

JSON

A vulnerability classified as problematic was found in Maiwei Safety Production Control Platform 4.1. This vulnerability affects unknown code of the file /api/DataDictionary/GetItemList. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-245062 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected configurations

Nvd

Vulners

Node

maiwei_safety_production_control_platform_projectmaiwei_safety_production_control_platformMatch4.1

VendorProductVersionCPE
maiwei_safety_production_control_platform_projectmaiwei_safety_production_control_platform4.1cpe:2.3:a:maiwei_safety_production_control_platform_project:maiwei_safety_production_control_platform:4.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
maiwei_safety_production_control_platform_project	maiwei_safety_production_control_platform	4.1	cpe:2.3:a:maiwei_safety_production_control_platform_project:maiwei_safety_production_control_platform:4.1:::::::*

CNA Affected

[
  {
    "vendor": "Maiwei",
    "product": "Safety Production Control Platform",
    "versions": [
      {
        "version": "4.1",
        "status": "affected"
      }
    ]
  }
]

References

vuldb.com/?ctiid.245062

vuldb.com/?id.245062

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

23.1%

JSON

Related for CVE-2023-6100