129 matches found
FUXA 1.3.0 - Unauthenticated ICS/SCADA Project Data Disclosure
FUXA v1.3.0 exposes full SCADA/HMI project configuration via GET /api/project without authentication, even when secureEnabled is true. The secureFnc middleware auto-generates a valid guest JWT when no token is provided, bypassing authentication. Exposed data includes server-side scripts, device...
7.5CVSS5.2AI score0.01203EPSS
SaveExploits0References2
20