Authorization

EisBaer Scada - CWE-285: Improper Authorization...

Hardcoded credentials

EisBaer Scada - CWE-321: Use of Hard-coded Cryptographic Key...

Design/Logic Flaw

EisBaer Scada - CWE-749: Exposed Dangerous Method or Function...

Information disclosure

EisBaer Scada - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2023-42494

Concrete details found: EisBaer Scada is affected by CVE-2023-42494 (CWE-749: Exposed Dangerous Method or Function). The linked PT-2023-6570 entry states the issue involves dangerous methods/functions in the SCADA system and that exploitation may allow a remote attacker to execute arbitrary code;...

CVE-2023-42494 EisBaer Scada - CWE-749: Exposed Dangerous Method or Function

EisBaer Scada - CWE-749: Exposed Dangerous Method or Function...

CVE-2023-42494 EisBaer Scada - CWE-749: Exposed Dangerous Method or Function

EisBaer Scada - CWE-749: Exposed Dangerous Method or Function...

CVE-2023-42493 EisBaer Scada - CWE-256: Plaintext Storage of a Password

EisBaer Scada - CWE-256: Plaintext Storage of a Password...

CVE-2023-42493 EisBaer Scada - CWE-256: Plaintext Storage of a Password

EisBaer Scada - CWE-256: Plaintext Storage of a Password...

CVE-2023-42493

CVE-2023-42493 concerns EisBaer Scada where passwords are stored in plaintext. The issue is tied to insecure credential storage in the affected software (EisBaer Scada), with high impact on confidentiality and integrity. Root cause: plaintext password storage. Exploitation details are not provide...

CVE-2023-42492 EisBaer Scada - CWE-321: Use of Hard-coded Cryptographic Key

EisBaer Scada - CWE-321: Use of Hard-coded Cryptographic Key...

CVE-2023-42492 EisBaer Scada - CWE-321: Use of Hard-coded Cryptographic Key

EisBaer Scada - CWE-321: Use of Hard-coded Cryptographic Key...

CVE-2023-42492

CVE-2023-42492 affects EisBaer Scada with a hard-coded cryptographic key (CWE-321). The root cause is use of a hard-coded key within the software, enabling potential disclosure or tampering of protected data. NVD lists a high/severe impact (Confidentiality, Integrity, Availability at high/critica...

CVE-2023-42490 EisBaer Scada - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

EisBaer Scada - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2023-42490 EisBaer Scada - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

EisBaer Scada - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2023-42490

CVE-2023-42490 concerns EisBaer Scada and is classified as CWE-200: Exposure of Sensitive Information to an Unauthorized Actor. Multiple connected records describe an information disclosure vulnerability in EisBaer Scada, with a network attack vector and high confidentiality impact (CVE CVSS 3.1:...

CVE-2023-42489 EisBaer Scada - CWE-732: Incorrect Permission Assignment for Critical Resource

EisBaer Scada - CWE-732: Incorrect Permission Assignment for Critical Resource...

CVE-2023-42489 EisBaer Scada - CWE-732: Incorrect Permission Assignment for Critical Resource

EisBaer Scada - CWE-732: Incorrect Permission Assignment for Critical Resource...

CVE-2023-42489

The CVE-2023-42489 entry concerns EisBaer Scada with a root cause of Incorrect Permission Assignment for Critical Resource (CWE-732). Affected software is EisBaer Scada; the vulnerability is tied to misconfigured permissions on critical resources, enabling high-impact exposure (C/H I/H A/H per CV...

CVE-2023-42488

CVE-2023-42488 – EisBaer Scada suffers a path traversal vulnerability caused by improper limitation of a pathname to a restricted directory. The issue is triggered over the network (attack vector: NETWORK) with low attack complexity and no privileges required, potentially allowing disclosure of c...