Design/Logic Flaw

2020-06-2617:15:00

PRIOn knowledge base

www.prio-n.com

0.002 Low

EPSS

Percentile

53.1%

JSON

ControlEdge PLC (R130.2, R140, R150, and R151) and RTU (R101, R110, R140, R150, and R151) exposes a session token on the network.

CPENameOperatorVersion
controledge_plc_firmwareeq130.2.114
controledge_plc_firmwareeq140.0.114
controledge_plc_firmwareeq150.0.114
controledge_plc_firmwareeq151.0.114
controledge_rtu_firmwareeq101.0.114
controledge_rtu_firmwareeq110.0.114
controledge_rtu_firmwareeq140.0.114
controledge_rtu_firmwareeq150.0.114
controledge_rtu_firmwareeq151.0.114

Name	Operator	Version
controledge_plc_firmware	eq	130.2.114
controledge_plc_firmware	eq	140.0.114
controledge_plc_firmware	eq	150.0.114
controledge_plc_firmware	eq	151.0.114
controledge_rtu_firmware	eq	101.0.114
controledge_rtu_firmware	eq	110.0.114
controledge_rtu_firmware	eq	140.0.114
controledge_rtu_firmware	eq	150.0.114
controledge_rtu_firmware	eq	151.0.114

References

www.us-cert.gov/ics/advisories/icsa-20-175-02

0.002 Low

EPSS

Percentile

53.1%

JSON

Related for PRION:CVE-2020-10624