Taserver Web Service Code Execution

The vulnerability of the TAserver web service for the TeNIX programmable logic controllers MFC1500 and MFC3000 lies in the lack of name filtering when generating a 404 HTTP error page. As a result, the name of the non-existent web page is passed unchanged to the generated error page. Exploiting...

PT-2018-2155

Name of the Vulnerable Software and Affected Versions TAserver versions affected versions not specified Description The issue is related to the lack of filtering of a non-existent web page name when generating a 404 error page in the HTTP protocol. This allows the name of the non-existent page to...