Lucene search
PRIOn knowledge basePRION:CVE-2023-27977HistoryMar 21, 2023 - 12:15 p.m.
Design/Logic Flaw
2023-03-2112:15:00
PRIOn knowledge base
www.prio-n.com
2
cwe-345
insufficient verification
data authenticity
data server
igss project
file deletion
tcp port
igss data server
igss dashboard
custom reports
A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause access to delete files in the IGSS project report directory, this could lead to loss of data when an attacker sends specific crafted messages to the Data Server TCP port. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior).
| CPE | Name | Operator | Version |
|---|---|---|---|
| custom_reports | le | 16.0.0.23040 | |
| igss_dashboard | le | 16.0.0.23040 | |
| igss_data_server | le | 16.0.0.23040 |
Related
nvd
nvd
CVE-2023-27977
2023-03-21 12:15:10
cvelist
cvelist
CVE-2023-27977
2023-03-21 00:00:00
cnvd
cnvd
zdi
zdi
cve
cve
CVE-2023-27977
2023-03-21 12:15:10
ics
ics
Schneider Electric IGSS
2023-03-23 12:00:00