CVE-2019-13528

2019-09-2421:23:48

CWE-285

icscert

www.cve.org

4.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.6%

JSON

A specific utility may allow an attacker to gain read access to privileged files in the Niagara AX 3.8u4 (JACE 3e, JACE 6e, JACE 7, JACE-8000), Niagara 4.4u3 (JACE 3e, JACE 6e, JACE 7, JACE-8000), and Niagara 4.7u1 (JACE-8000, Edge 10).

CNA Affected

[
  {
    "product": "Niagara",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Niagara AX 3.8u4 (JACE 3e, JACE 6e, JACE 7, JACE-8000), Niagara 4.4u3 (JACE 3e, JACE 6e, JACE 7, JACE-8000), Niagara 4.7u1 (JACE-8000, Edge 10)"
      }
    ]
  }
]

References

www.us-cert.gov/ics/advisories/icsa-19-262-01