Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In Bender COMTRAXX, user authorization is validated for most, but not all, routes in the system. A user with knowledge about the routes can read and write configuration data without prior authorization. This affects COM465IP, COM465DP, COM465ID, CP700, CP907, and CP915 devices before 4.2.0.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Bender COMTRAXX 安全漏洞
Vulnerability Description
Bender COMTRAXX是德国本德尔（bender）的一个应用于工业的通讯网关。该软件支持 以太网，Modbus / TCP，RS-485，BMS 协议通讯，用户可以通过 web 页面对设备进行访问控制。 Bender COMTRAXX存在安全漏洞，该漏洞源于在没有事先授权的情况下读写配置数据。以下产品及版本受到影响：COM465IP 4.2.0之前版本、COM465DP、COM465ID、CP700、CP907和CP915设备。
CVSS Information
N/A
Vulnerability Type
N/A