Command injection

2022-06-2415:15:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.0%

LRM version 2.4 and lower does not implement TLS encryption. A malicious actor can MITM attack sensitive data in-transit, including credentials.

CPENameOperatorVersion
local_run_managerge1.3
local_run_managerle3.1

CPE	Name	Operator	Version
	local_run_manager	ge	1.3
	local_run_manager	le	3.1

References

www.cisa.gov/uscert/ics/advisories/icsa-22-153-02