CVE-2021-29298 - CERT CVE
ID CVE-2021-29298
Sažetak Improper Input Validation in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause a denial of service and application crash via crafted traffic from a Man-in-the-Middle (MITM) attack to the component "FrameworX.exe"in the module "fxVPStatcTcp.dll".
Reference
CVSS
Base: 2.6
Impact: 2.9
Exploitability:4.9
Pristup
VektorSloženostAutentikacija
NETWORK HIGH NONE
Impact
PovjerljivostCjelovitostDostupnost
NONE NONE PARTIAL
CVSS vektor AV:N/AC:H/Au:N/C:N/I:N/A:P
Zadnje važnije ažuriranje 09-08-2021 - 18:49
Objavljeno 30-07-2021 - 19:15