Lucene search
CERTVDEVULNRICHMENT:CVE-2024-6421HistoryJul 10, 2024 - 7:36 a.m.
CVE-2024-6421 Pepperl+Fuchs: Incorrectly configured FTP-Server in OIT Products
2024-07-1007:36:52
CWE-200
CERTVDE
github.com
6
pepperl+fuchs
ftp server
oit products
unauthenticated
remote attacker
sensitive device information
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
6.7
Confidence
Low
EPSS
0.001
Percentile
37.4%
SSVC
Exploitation
none
Automatable
yes
Technical Impact
total
An unauthenticated remote attacker can read out sensitive device information through a incorrectly configured FTP service.
ADP Affected
[
{
"cpes": [
"cpe:2.3:o:pepperl-fuchs:oit1500-f113-b12-cb_firmware:*:*:*:*:*:*:*:*"
],
"vendor": "pepperl-fuchs",
"product": "oit1500-f113-b12-cb_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "semver",
"lessThanOrEqual": "V2.11.0"
}
],
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:2.3:o:pepperl-fuchs:oit200-f113-b12-cb_firmware:*:*:*:*:*:*:*:*"
],
"vendor": "pepperl-fuchs",
"product": "oit200-f113-b12-cb_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "semver",
"lessThanOrEqual": "V2.11.0"
}
],
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:2.3:o:pepperl-fuchs:oit500-f113-b12-cb_firmware:*:*:*:*:*:*:*:*"
],
"vendor": "pepperl-fuchs",
"product": "oit500-f113-b12-cb_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "semver",
"lessThanOrEqual": "V2.11.0"
}
],
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:2.3:o:pepperl-fuchs:oit700-f113-b12-cb_firmware:*:*:*:*:*:*:*:*"
],
"vendor": "pepperl-fuchs",
"product": "oit700-f113-b12-cb_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "semver",
"lessThanOrEqual": "V2.11.0"
}
],
"defaultStatus": "unaffected"
}
]References
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
6.7
Confidence
Low
EPSS
0.001
Percentile
37.4%
SSVC
Exploitation
none
Automatable
yes
Technical Impact
total
Related for VULNRICHMENT:CVE-2024-6421