漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
An Improper Authentication issue was discovered in WAGO PFC200 Series 3S CoDeSys Runtime versions 2.3.X and 2.4.X. An attacker can execute different unauthenticated remote operations because of the CoDeSys Runtime application, which is available via network by default on Port 2455. An attacker could execute some unauthenticated commands such as reading, writing, or deleting arbitrary files, or manipulate the PLC application during runtime by sending specially-crafted TCP packets to Port 2455.
CVSS Information
N/A
Vulnerability Type
认证机制不恰当
Vulnerability Title
WAGO PFC200 Series 3S CoDeSys Runtime 授权问题漏洞
Vulnerability Description
WAGO PFC200 Series是德国WAGO公司的一款PFC200系列的可编程逻辑控制器产品(PLC)。3S CoDeSys Runtime是其中的一套运行环境。 WAGO PFC200 Series 3S CoDeSys Runtime 2.3.X版本和2.4.X版本中存在授权问题漏洞。远程攻击者可通过向2455端口发送特制的TCP数据包利用该漏洞执行命令,如读取,写入或删除任意文件或操作PLC应用程序。
CVSS Information
N/A
Vulnerability Type
N/A